Web FE group pages cannot handle multiple identities

[LucaCinquini]

From Matthias Buchner:

Hi,
While exercising log ins, authentification, group registrations and downloads on my 1.5 Brower Park installation I ran into some problems. I have three 'buechner' accounts registered in the local database (local, esgf-data.dkrz.de and esg-dn1.nsc.liu.se).

rootAdmin@se38:[esgf-sh]:[admin]> show --au
Users:
username firstname lastname openid
rootAdmin Matthias Buechner https://esg.pik-potsdam.de/esgf-idp/openid/rootAdmin
buechner https://esgf-data.dkrz.de/esgf-idp/openid/buechner
buechner https://esg-dn1.nsc.liu.se/esgf-idp/openid/buechner
buechner Matthias Buechner https://esg.pik-potsdam.de/esgf-idp/openid/buechner

The overview (see attached screenshot) lists all three accounts with the same OpenID. When I alter the details of one entry the change is shown for all three accounts. Also deleting one of the accounts throws an error everytime I click on 'Manage Users'. So I assume the module can't handle multiple accounts with the same username although from different OpenID providers.

This might already have been addressed in the current devel branch but I just want to make sure it will be fixed in the next version.

Thank you
Matthias

[thiasB]

Meanwhile I checked my local database for inconsistent entries but I can't find any. A database dump, the esgf shell as well as investiations in the db itself didn't let me find any issues. Tomcat throws the following error into the log: https://gist.github.com/thiasB/6712463#file-web-fe_error.

Maybe worth noting is the behaviour of the User Role Group Manipulation mask. Every click on "User Role Group Manipulation" adds one more entry of the same any only local group to the drop down group selector (see screenshot)

[thiasB]

I don't know if this is error message in the esgf-shell is related to the issue?

rootAdmin@se38:[esgf-sh]:[admin]> show -uig ISI-MIP_Research
ERROR [main] (GroupRoleDAO.java:getUsersInGroup():576) - java.sql.SQLException: ERROR: missing FROM-clause entry for table "p" Query: SELECT username, firstname, lastname, openid FROM esgf_security.user WHERE id IN (SELECT p.user_id FROM esgf_security.permission as p WHERE p.group_id = (SELECT id FROM esgf_security.group WHERE name = ? )) AND p.approved = 't' Parameters: [ISI-MIP_Research]
Group: ISI-MIP_Research

rootAdmin@se38:[esgf-sh]:[admin]> show -uig wheel           
ERROR [main] (GroupRoleDAO.java:getUsersInGroup():576) - java.sql.SQLException: ERROR: missing FROM-clause entry for table "p" Query: SELECT username, firstname, lastname, openid FROM esgf_security.user WHERE id IN (SELECT p.user_id FROM esgf_security.permission as p WHERE p.group_id = (SELECT id FROM esgf_security.group WHERE name = ? )) AND p.approved = 't' Parameters: [wheel]
Group: wheel