OOPS when registering a new account on login.lp.net with an email address that belongs to an existing profile

[Guilherme Salgado]

If someone tries to register using an email address that belongs to an existing profile which does not use Launchpad, we pretend we've not seen that email address before and let the user continue with the registration process. Then, at the end of the process we just change the necessary bits on that existing profile instead of creating a new one.

This doesn't work when you use the registration form on login.lp.net:
OOPS-1200S2282 -- ProgrammingError: permission denied for relation account
OOPS-1213S88 -- ProgrammingError: permission denied for relation person (on staging)

More ProgrammingError: permission denied for relation person: OOPS-1220I561, OOPS-1220J559, OOPS-1220J560, OOPS-1220J561, OOPS-1220I636, OOPS-1220J645 (all in lpnet), OOPS-1250J303, OOPS-1250I14

[Francis J. Lacoste (flacoste)]

This makes the OOPS report daily.

Stuart can you see if there is an easy fix?

[Stuart Bishop (stub)]

There is no easy fix.

The authtoken methods (the token used for the SSO server) are trying to modify Person records. The SSO server cannot do this, as it needs to remain operational when the Launchpad database is down for maintenance.

The workflows need to be fixed so that the SSO registration forms only deal with Account, and anything that needs to deal with Person or Account+Person needs to redirect to the main Launchpad site.

[Guilherme Salgado (salgado)]

I think there's an easy fix for this bug. We could detect when SSO users attempt to register using an email address that is already associated with a Launchpad profile and ask them to either claim that profile (so that the credentials can be used on SSO) or register with a different email address.

The other alternative I see is to redirect from login.lp.net to lp.net on the last step of the registration, so that the changes to the Person entry can be done. At that point we'd have to present a message explaining to the user why we're creating a LP account instead of an SSO one (as requested).

[Diogo Matsubara (matsubara)]

Fixed in devel r8799.

[Curtis Hovey (sinzui)]

Fixed released in Launchpad sinzui.