Support #7438

[SCP ID :##3832##] : M2U issue double userid

Added by Zahir Abd Latif over 7 years ago. Updated about 7 years ago.

Status:Work Completed-End life cycleStart date:May 12, 2017
Priority:NormalDue date:July 25, 2017
Assignee:Tommy Arryandy % Done:

100%

Category:-Spent time:3.00 hours
Target version:-

Description

Hi,
Kindly attend below request:

Please check for issue as below :

in FTL able to insert duplicate userid although with different format for capital and lowercase, sample as below :

1. MimiTest
2. mimitest

but failed when try to login with below error :

[5/12/17 9:31:07:479 WIB] 00000194 SystemErr R org.hibernate.NonUniqueResultException: query did not return a unique result: 2
at org.hibernate.impl.AbstractQueryImpl.uniqueElement(AbstractQueryImpl.java:844)
at org.hibernate.impl.CriteriaImpl.uniqueResult(CriteriaImpl.java:328)
at net.penril.ibss.core.hibernate.IbCustProfile.getUndeletedUserProfile(IbCustProfile.java:1942)
at net.penril.ib.middle.login.service.IBLoginPasswordService.verifyUsername(IBLoginPasswordService.java:63)
at com.ib.rib.controller.actions.ib101_access.login.IBLoginPasswordAction.execute(IBLoginPasswordAction.java:67)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
at com.ib.common.utils.IBActionServlet.doPost(IBActionServlet.java:82)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:595)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:668)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1233)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:782)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:481)
at com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:178)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:136)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:97)
at com.ib.common.utils.SessionTimeoutFilter.doFilter(SessionTimeoutFilter.java:85)
at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:967)
at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1107)
at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java:87)
at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:949)
at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1817)
at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:200)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:463)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:530)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:316)
at com.ibm.ws.http.channel.inbound.impl.HttpICLReadCallback.complete(HttpICLReadCallback.java:88)
at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:175)
at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
at com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)
at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)
at com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204)
at com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775)
at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1892)

History

#1 Avatar?id=2607&size=24 Updated by Rayvandy Gabbytian over 7 years ago

  • Status changed from New - Begin Life Cycle to Pending Customer Feedback
  • Assignee changed from Rayvandy Gabbytian to Zahir Abd Latif

My email to Wahyu on 12th May 2017:

Pak Wahyu,

This issue has been fixed and deployed to sit with following details:

- Program Version: v2.7 beta 1.1
- URL: http://10.247.12.51:9080/bii-rib-sit-3737/common/Login.do
- Date/Time: 12th May 2017 ~13:15 UTC +7
- Fixes are done on top of STP Enhancement
- Fixes are combined altogether with package:
[Request ID 3737]
[Request ID 3803]
[Request ID 3832]
[Request ID 3833]

Root cause:
1. During FTL, when moving from username page to link account page, system does not check whether user name exist or not,
2. During FTL, when moving from link account to result page, system does not check whether user name exist or not, However system will fail to insert if username is already exist in DB. MimiTest and mimitest are considered as 2 different users.
3. Unlike in login page, system will ignore any case sensitive when querying to database. For this particular case, system could not return a unique result since there are 2 same username with different upper/lower case.

Solution:
1. During FTL, when moving from username page to link account page, system shall check whether user name exist or not,
2. During FTL, when moving from link account to result page, system shall check whether user name exist or not; just incase another user is performing FTL with same username,

Interim solution:
1. Change one of the username in m2u database and OpenAM to make it unique and inform respective user for any changes.

Impact:
1. FTL when moving from step 3 to step 4,
2. FTL when moving from step 4 to step 5,
3. Retest login in M2U & RMBP (although no code changes upon login).

Test result:
Internal testing result is in progress by Tommy.

Thank you.

#2 Updated by Zahir Abd Latif over 7 years ago

  • Status changed from Pending Customer Feedback to Closed - End of life cycle
  • % Done changed from 0 to 100

Issue already closed in SCP.

#3 Avatar?id=2607&size=24 Updated by Rayvandy Gabbytian about 7 years ago

  • Due date set to July 25, 2017
  • Status changed from Closed - End of life cycle to Internal Testing
  • Assignee changed from Zahir Abd Latif to Tommy Arryandy
  • % Done changed from 100 to 0

Hi Tommy,

Please create test script for this case.

Thank you.

#4 Updated by Tommy Arryandy about 7 years ago

  • Status changed from Internal Testing to Work Completed-End life cycle
  • % Done changed from 0 to 100

Already test and included in M2U Fixing 2.7 , however not yet deployed in production

Also available in: Atom PDF