#289 Not all user data is deleted when a user is deleted
Reporter
christian.bendt
Owner
MattJ
Created
Updated
Stars
★ (1)
Tags
Status-Invalid
Type-Defect
Priority-Medium
christian.bendt
on
*What steps will reproduce the problem?*
1. Create a new user account on prosody server with xmpp client
2. Add data to vcard, add users to roster, play a bit
3. Delete the user from the prosody server with xmpp client
*What is the expected output? What do you see instead?*
I would expect that prosody deletes all saved information about a user when the user itself is deleted.
At the moment only /var/lib/prosody/servername/accounts/user.dat is deleted. All other data is still there. If a new user registers with the same username all old data is available. This is a security risc.
*What version of the product are you using? On what operating system?*
Prosody 0.9 nightly build 15 (2012-03-09, 2e274e088ddc)
Debian GNU/Linux 6.0.4 (squeeze)
*Please provide any additional information below.*
MattJ
on
I can't reproduce this. If you can still, please supply debug logs from Prosody during a deletion.
Changes
tags Status-Invalid
owner MattJ
christian.bendt
on
Cannot reproduce this anymore. I do not know what happened there.
*What steps will reproduce the problem?* 1. Create a new user account on prosody server with xmpp client 2. Add data to vcard, add users to roster, play a bit 3. Delete the user from the prosody server with xmpp client *What is the expected output? What do you see instead?* I would expect that prosody deletes all saved information about a user when the user itself is deleted. At the moment only /var/lib/prosody/servername/accounts/user.dat is deleted. All other data is still there. If a new user registers with the same username all old data is available. This is a security risc. *What version of the product are you using? On what operating system?* Prosody 0.9 nightly build 15 (2012-03-09, 2e274e088ddc) Debian GNU/Linux 6.0.4 (squeeze) *Please provide any additional information below.*
I can't reproduce this. If you can still, please supply debug logs from Prosody during a deletion.
ChangesCannot reproduce this anymore. I do not know what happened there.