login question

[Detox]

Hello All!

when I use the smart client. i type in my username (BOB123) and password
If I type Bob123 I can still log in

How can I deny access if I use the wrong (upper/lower)case letter?
I would like to require an exact match in order to successfully log in.
I assume this would require some sort of check for exact username in db, but how can I do that?


Thanks for any help

[Harjo]

What database are you using? Sybase, is by default case insensitive

[Detox]

sorry for not specifying sybase

[Detox]

This is what I want to modify:

security.getUserName( [userUID])

Can I specifiy some parameter with this to have exact match? BOB123 vs Bob123?

[jcompagner]

if you use the default servoy authenticator (so you didn't specify your own authenticator solution for this) then servoy just does:

"select user_uid from servoy_users where user_name=? and user_password=?"

and yes as Harjo said, if the database is case insensitive then it will return the uuid and the user is logged in.

You could make your database case sensitive or i guess have your own authenticator that checks this for you somehow if you have your own user management