After installing D6-beta2, and setting up the super-administrator account (UID 1), I created two user accounts. They ended up being UID 3 & 4. Notice that UID2 was not created.

Perhaps related to this issue is the fact that UID 3 cannot edit his own account settings, while UID 4 can. They both have the correct permissions and should be able to alter their account settings. UID 3 recieves the error message "Detected malicious attempt to alter protected user fields." Below is the log entry (with the sensitive data redacted):

Details
Type	security
Date	Friday, October 19, 2007 - 20:25
User	...
Location	.../drupal-6.0-beta2/user/3/edit
Referrer	.../drupal-6.0-beta2/user/3/edit
Message	Detected malicious attempt to alter protected user fields.
Severity	warning
Hostname	...
Operations

I think these two problems are related, but don't really know.

-KW

Comments

webernet’s picture

webernet commented
Status: Active » Closed (works as designed)

This was done intentionally in order to solve a bug. No new site will have a UID 2. Older sites with a UID 2 will continue to function normally.