Username validation - allow spaces...
|Assignee:||Jean-Philippe Lang||% Done:|
|Category:||Accounts / authentication|
I've tested a very simple patch with a test installation of RedMine to allow usernames with spaces.
I have modified the RegEx in app/models/user.rb ...
validates_format_of :login, :with => /^[a-z0-9_\-@\.]*$/i
validates_format_of :login, :with => /^[a-z0-9 _\-@\.]*$/i
After running a number of simple tests (as follows)
- LDAP autogenerate user
- Add Issue
- List Issues
- Filter Issues
- View Activity
- View Homepage
- Add Member to Project
- Assign Issue To
I have experienced no problems with this patch.
After a reviewing a reasonable amount of code it appears that db:user/id is used for the username xref'ing and the visible login name is only used for display and initial login.
Is there any further rationale for disallowing spaces in usernames?
Here is my rationale for usernames which include spaces.¶
My need for spaced usernames is linked to deployment, esp. with auto generating accounts with LDAP. Our Windows AD was setup with First Last style logins... and so we have to go through the process of user education if we are going to use an alternative LDAP property, in our case MailNickname, to login.
As you can appreciate logging in with their accustomed username would be a far easier solution, in terms of human engineering.
I think this would be helpful to a number of possible enterprise users too.
#2 Updated by Ken Sands almost 10 years ago
Since the user name is just a tag I don't see why it's a bad idea, i have my svn users as full names with spaces, allowing the user names in redmine to have spaces ties in nicely with this, it reads easier on reports for development etc, it's the user name not the ID, you wouldn't have such a restriction on a location name or client name, it's a nice identifier that links to an ID the ID is the important bit. As long as the user name is unique and doesn't contain nasty characters that might cause format issues (ampersands slashes etc) it should be accepted. I've also tested by going into the database and changing the usernames from ie "kensands" to "Ken Sands" and everything appears to work as expected.
#9 Updated by Josef Assad over 6 years ago
Daniel Felix wrote:
Well this seems to be open. But is there any use case for usernames with spaces?
Antoine Rodriguez mentions that AD allows it so I assume there's lots of usernames in the wild with spaces in them.
I am also interested in having this resolved; we don't have an AD hooked up, but we have a very broad userbase and have had reports of confused users because redmine throws a blank page when someone tries using a user name with spaces.
I have read the discussion here and looking at it from the opposite side, is there a reason NOT to implement that small regex change?
If there is, then can we at least add an informational message in the register page under the Login text box explaining what characters are allowed?
There is another regression somewhere in the tracker. Regarding usernames with German sings like äöü.
Yeah that's in the linked issues above, I think you're referring to #6166.