Unfreezing user IDs unfreezes all users within the string

[craigagnew]

Summary

With maintenance mode activated, when selecting to unfreeze this for certain Umbraco users, certain users are unfrozen if their user ID contains part of another unfrozen user's ID - for example, user with ID 12 will be unfrozen inadvertently if the user with ID 2 is added to the list.

Version

Present in 10.2.0

Steps to reproduce

1. Navigate and log in to the CMS
2. At the Maintenance Mode tab, click the Advanced Options
3. Within the 'Unfrozen userids' field, enter the current user's ID (e.g. 5)
4. Click the save button
5. Navigate to any content or media node
6. Save and publish the node
7. Observe that the content saves
8. Update the unfrozen id to contain the current user's ID within a longer string (e.g. 150 since 5 appears within it)
9. Click the save button
10. Navigate to any content or media node
11. Save and publish the node
12. Observe that the content saves

Expected behaviour

• Only users added to the list of unfrozen user IDs can circumvent maintenance mode

System info

• Umbraco 10.8.6