Security Question around the Default User

[David Torre, geändert vor 12 Jahren.]

Greetings.

I'm writing a security hardening guide for Liferay, and noticed that the default install has a user named "[e-mail]" with a password of "password" and passwordEncrypted = 0 in the SQL DB. I verified that the user cannot login using said credentials, but now I'm kind of curious as to why? Is it due to some internal code that prevents an interactive login from this user?

Also, is it safe to completely remove this row in the SQL DB?


Kind regards,

[Mika Koivisto, geändert vor 12 Jahren.]

Default user can never login and no it's not safe to delete any rows from the DB directly.