10.5.6 Security error.

[zenspeaks]

I am running Mac OS 10.5.6 on a 2.16 Blackbook. There are two users registered to my system. My Login with a password and my housemate's user name (without a password).
This was the massive bug I noticed.

I was logged in when I opened the lid to receive the user and password prompt.
At that point when I entered my housemate's user ID, Mac took my to MY desktop.

I was able to replicate this occurrence several times.

Any idea what's happening?

 

[wrldwzrd89]

I am running Mac OS 10.5.6 on a 2.16 Blackbook. There are two users registered to my system. My Login with a password and my housemate's user name (without a password).
This was the massive bug I noticed.

I was logged in when I opened the lid to receive the user and password prompt.
At that point when I entered my housemate's user ID, Mac took my to MY desktop.

I was able to replicate this occurrence several times.

Any idea what's happening?

Is the other account also an administrator, or a standard user? If the other account is NOT an administrator, then you have found a serious privilege escalation bug. On the other hand, if the other account is an administrator, then the bug you've found is less serious - a so-called crossed-credentials bug. In either case, it should be reported to Apple through the bug reporter, here (you need to be at least an Online ADC member to use it).

EDIT: Just tested it, seems to be crossed credentials and not a privilege escalation bug. I was able to reproduce this behavior.