[JAMES-1602] Constrain users created in the UsersFileRepository to RFC 3696 compliant ones

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.3.2
• Fix Version/s: 2.3.2.1
• Component/s: UsersStore & UsersRepository
• Labels: security
• Assignee: Steve Brewin
• Reporter: Steve Brewin
• Created: 04/Aug/15 18:02
• Updated: 05/Aug/15 17:42
• Resolved: 05/Aug/15 17:42

Description

RFC 3696 defines the syntax for the local part of a mail address that all MTAs MUST support.
org.apache.james.userrepository.UsersFileRepository currently allows the creation of user names that do not conform to this. As the user name is used as the local part of the mail address this allows the creation of mails that cannot be guaranteed to be accepted by all MTAs.