enumerateUsers offers exact_match option but returns non exact matches

[Patrick Gerken]

We are using PloneFlashUpload, that needs to authenticate users when a request
started. It gets the user from acl_users and gets himself a new security_manager
with that user.

In case of the user "admin" nothing works as it should as he believes we are the User
"Admin" that exists in LDAP, but without Admin rights.

From stepping through it, I can see that enumerateUsers, gets a parameter exact_match set to 1.

It then forwards the request for getting users to the LDAPUserFolder.getUserById

The API of LDAPUserFolder does not promise exact matches, and in this case it returned an "Admin"
user when I wanted an "admin" user.

I think it should check the ID after the query, or maybe change the API of LDAPUserFolder.getUserById
to be more exact.

[Jens Vagelpohl (dataflake-deactivatedaccount-deactivatedaccount)]

Patrick, could you test the latest code from the SVN branch at http://svn.dataflake.org/svn/Products.LDAPMultiPlugins/branches/1/ and let me know if it works for you? I have checked in a fix:

http://svn.dataflake.org/viewvc?view=revision&revision=1954

[Patrick Gerken (do3cc)]

Wow, very quick reaction! Thanks Jens.

It works now!

[Jens Vagelpohl (dataflake-deactivatedaccount-deactivatedaccount)]

Thanks for the quick test, I just released vrsion 1.10 with this fix:

http://pypi.python.org/pypi/Products.LDAPMultiPlugins/1.10