Bug: Login name not converted to WikiName

Special escape characters are interpreted in Access.pm regexp => for mod_ntlm authentication: 1)warnings are got (in Apache error.log) for each user (Main.domain\username) access verification 2)"Main.domain\username" format is not recognized for access control settings

The good fix is described in LoginNameAndNtlm on the bottom (Access.pm:surround username with \Q \E -> 3 occurences)

Test case

Set mod_ntlm auth for TWiki 1)Launch a TWiki script which needs authentication as a non registered user => warnings like "view: Unrecognized escape \m passed through in regex; marked by <-- HERE in m/^Users.YNET\m <-- HERE hwilkie$/ at ../lib/TWiki/Access.pm line 187., " 2) Restrict a web access rights for a non-registred user using Main.domain\username format -> this doesn't work

Environment

-- CostinCerchez - 26 Aug 2005

Impact and Available Solutions

Follow up

Fix record

Access.pm:

if( @denyList ) { if( grep { /^\Q$theUserName\E$/ } @denyList )

if( @allowList ) { if( grep { /^\Q$theUserName\E$/ } @allowList ) {

my $isInGroup = grep { /^\Q$usrTopic\E$/ } @grpMembers;

Discussion