[SENTRY-2432] The case of a username is ignored when determining object ownership

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0, 2.2.0
• Fix Version/s: 2.2.0
• Component/s: Sentry
• Assignee: Na Li
• Reporter: Na Li
• Created: 22/Oct/18 21:13
• Updated: 24/Oct/18 20:37
• Resolved: 24/Oct/18 20:37

Description

Sentry saves user name associated with a privilege in lower case. And when getting privileges of a given user, the query returns the privileges associated with a user in case-insensitive way.

Therefore, if there are two users, only differ in case, will have same privileges.

For example:
1) User user_1 is granted privilege "ALL" on a database DB_1
2) then User USER_1 has full access on that database,

The desired behavior is to keep user name case sensitive.

Issue Links

• links to: Review Link for this case