id	summary	reporter	owner	description	type	status	priority	component	severity	resolution	keywords	cc	release
8217	Race condition when creating new accounts	anonymous	hasienda	There is a race condition in AccountManagerPlugin that occurs when a user is creating a new account.\r\n\r\nFor the htfile backend, no file locking is ever done during the account creation process.\r\nFor the db backend, the account creation process is spread across multiple transactions.\r\n\r\nThis means that one request can check to see if an account exists, not find it, start adding a new account, and then discover that another request already did the same thing (which results in it bombing out with an !IntegrityError when trying to add the email, name, etc. to the database). Because of the order in which operations occur, this also means that the second request will wipe out the temporary password the first request created, which means the email the new user gets contains an invalid password.	defect	new	normal	AccountManagerPlugin	major		race-condition	rjollos	0.12