Re: [Unity-idm-discuss] userfeedback on invitation and a bug.

[Sander A. <sa....@fz...>]

Hi Krzysztof,

On Tue, 2021-02-16 at 10:30 +0100, Krzysztof Benedyczak wrote:
> Hi Sander,
> 
> W dniu 12.02.2021 o 09:34, Sander Apweiler pisze:
> > Good morning Krzysztof,
> > 
> > I got some userfeedback about invitation and the mentioned problem
> > occurred for multiple users. The user had multiple accounts in
> > unity
> > and wishes to select which account is used to accept this
> > invitation. I
> > think the problem here is that the invitation is bind to the first
> > account which has the entered email address.
> 
> Can you please explain this in more detail?
I'll try it.
> 
> What sort of invitations are discussed here? Invitation to enquiries
> or 
> to registration forms?
The invitations are going to enquiries. The user had already two or
more accounts in unity using the same email address.
> 
> Can you describe the context here? Who/to what is inviting, from what
> app, etc.
We created a group and enabled upman on this group but only using
invitations to users who have an account in unity, so using enquiries.
The user got the invitation and click on the link. The account is added
to the group. Some investigation of the accounts of the users, who have
multiple accounts with same email address, I encountered that the first
account (lowest entity ID) which uses the email address is added to
group.

In the case where users reported a problem, they did not use their
first account in unity but another one. So they want to decide which
account is going to be added to the group.

Of course this is in some way a wrong usage of the service by the
users, but they will always blame the service and the software.
> 
> > The bug I found is that the check if an users exists with the
> > entered
> > email address is case sensitive. We had an user with capital
> > letters in
> > the email address, while the project manager entered only in lower
> > cases. I think the check should be case-insensitive. I found this
> > on
> > unity version 3.3.4. I don't now if this is fixed in meanwhile.
> 
> Hmm, that certainly should not be the case. Email identity is
> compared 
> case insensitive. But perhaps there is some other mechanism in
> question.
> 
> Perhaps answer to the above questions will help. But anyway: can you 
> provide a reproduction steps?
Yes I'll explain it using my email address.

The user created two accounts with same email address but not equal in
case sensithiv:
- 1st account email: Sa....@fz...
- 2nd account email: sa....@fz...

The project manager send an invitation to sa....@fz... and
the user accepted it. In this case the 2nd account was added to the
group, but the user still uses the 1st account. In the other cases,
described above, the first account with the email address is added to
the group. For this reason it seems to me that the check is not handled
case sensitive. At least the behaviour is different.

Cheers,
Sander

> 
> Thank you
> Krzysztof
> 

-- 
Federated Systems and Data
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Volker Rieke
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt
-----------------------------------------------------------------------
-----------------------------------------------------------------------