Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #37592 Mitigate risks of data loss in DB
    Actions
    Infos
    #37592
    Thomas Gerbet (tgerbet)
    2024-04-26 16:04
    2024-04-18 12:11
    39238
    Details
    Mitigate risks of data loss in DB

    This is a follow up to request #37545 (CVE-2024-30246).

    The goal of this request is to take a decision so we can avoid the same class of issues again in the future and to do the minimal changes in the codebase so we can start acting on our decision.

    This request will not take care of applying the changes on the whole codebase. This will need to done progressively where/when possible since it is going to be a very large chunk of work in any cases.

    Other
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Closed
    2024-04-26
    Attachments
    Empty
    References
    Referencing request #37592

    Git commit

    tuleap/tuleap/stable

    feat: FTS DB plugin uses UUID instead of auto-increment INT cfe1e5c511
    User avatar Thomas Gerbet (tgerbet) , 2024-04-18 18:09
    chore: ADR on data loss prevention & UUIDs instead of AUTO_INCREMENT 07501131d3
    User avatar Manuel Vacelet (vaceletm) , 2024-04-26 12:20
    Display settings

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2024-04-26 16:04

    The ADR has been merged and a test was made in the FTS DB plugin as an example. Closing this request as the initial scope has been covered.

    • Status changed from New to Closed
    • Connected artifacts
    • Close date set to 2024-04-26