Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-16456

Remove group fails if any group permissions set

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Fix
    • Low
    • None
    • 3.0
    • None
    • Confluence standalone 3.0.0_01
      JDK 1.6.0_12

    Description

      Group administration screen allows you to Remove groups. When you select a group that has permissions associated with it (but in our case, there were no users who were members of this group) and click Remove you are given a list of spaces (but not personal spaces) and space permissions associated with the group. Then at the bottom of that list is a Confirm button to agree that you will lose all these permissions, etc. Click Confirm and you get an error message with the following trace:

      2009-07-23 14:18:59,579 ERROR [http-8080-5] [atlassian.confluence.servlet.ConfluenceServletDispatcher] sendError Could not execute action
       -- url: /admin/users/doremovegroup.action | userName: admin | referer: http://baseurl/admin/users/removegroup-confirm.action?atl_token=XdXImNHCIl&name=bsr
      java.lang.NullPointerException
      	at com.atlassian.confluence.security.ContentPermission.compareTo(ContentPermission.java:197)
      	at java.util.TreeMap.put(TreeMap.java:545)
      	at java.util.TreeSet.add(TreeSet.java:238)
      	at java.util.AbstractCollection.addAll(AbstractCollection.java:305)
      	at java.util.TreeSet.addAll(TreeSet.java:295)
      

      If you then go through and manually find all the spaces and remove the group from the permissions list for each space then you can finally remove the group. Big problem if the group has access to personal spaces as the only way you can find that out is by querying the database - the personal space permissions do not show up on the aforementioned permissions listing.

      You should be able to actually remove a group and all its permissions as long as there are no members of the group. Group removal should not be restricted to cases where there are also no permissions associated with the group, especially because it is impossible to see all the group's permissions (i.e. personal spaces) without querying the database manually.

      Attachments

        Issue Links

          Activity

            People

              shaffenden Steve Haffenden (Inactive)
              4ad8410aecce Diane Sexton
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: