You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@iotdb.apache.org by "Tian Jiang (Jira)" <ji...@apache.org> on 2020/05/20 03:51:00 UTC

[jira] [Created] (IOTDB-687) Constrain the length of users passwords

Tian Jiang created IOTDB-687:
--------------------------------

             Summary: Constrain the length of users passwords
                 Key: IOTDB-687
                 URL: https://issues.apache.org/jira/browse/IOTDB-687
             Project: Apache IoTDB
          Issue Type: Improvement
          Components: Core/Others
            Reporter: Tian Jiang


We have a lower bound of 4 for the lengths of users and passwords, but there is no upper bound for that, so a malicious user may attack by using very long user names and it would be better to have a constraint on the length.

However, generally, only DBAs have such privileges, so it would not be a very big concern.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)