[IOTDB-687] Constrain the length of users passwords

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: Core/Others
• Labels: easy-fix
• Assignee: Unassigned
• Reporter: Tian Jiang
• Created: 20/May/20 03:50
• Updated: 03/Sep/21 03:23

Description

We have a lower bound of 4 for the lengths of users and passwords, but there is no upper bound for that, so a malicious user may attack by using very long user names and it would be better to have a constraint on the length.

However, generally, only DBAs have such privileges, so it would not be a very big concern.