[#JRA-11156] User Picker - Only users associated with one or more groups should be viewable

JIRA

User Picker - Only users associated with one or more groups should be viewable

Created: 21/Sep/06 08:41 AM Updated: 26/May/08 06:02 AM

Component/s:

Custom Fields, Issue Fields, User Management

Affects Version/s:

3.6.4

Fix Version/s:

None

Time Tracking:

Not Specified

Environment:

All

Issue Links:

Duplicate

This issue duplicates:

~~JRA-13812~~ Users belonging to no groups should not show up in the ajax style user picker

This issue is duplicated by:

~~JRA-12986~~ Removing users from all groups does not remove them from user pickers

~~JRA-13588~~ Do not show in User Picker users who are not members of groups/Project Roles ("disabled")

Reference

This issue is related to:

JRA-7659 Limit user picker to members of certain groups / roles

Participants:	Daniel Woodhams, JP Patrikainen, Scott Farquhar [Atlassian] and Stephen Tan
Since last comment:	52 weeks ago
Support reference count:	5
Labels:

Description

« Hide

Currently all users in the system are displayed in the user picker.

However, many problems of user selection are caused by the fact that ex-employees and users that have been created in error (due to data imports etc) are included in the selection.

Limiting the user picker selection to those that are in at least one group would mean that users could be deactivated by removing them from all groups.

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Daniel Woodhams added a comment - 21/Sep/06 08:44 AM

JRA-7659 - is more detailed in that only specific members of certain groups should be seen in the user picker.

[ Permlink | « Hide ]

Scott Farquhar [Atlassian] added a comment - 23/Sep/06 02:42 PM

Resolving, as it duplicates JRA-7659.

[ Permlink | « Hide ]

Scott Farquhar [Atlassian] added a comment - 07/Oct/06 07:35 PM

Re-opening due to Daniel's comment:

"This improvement was to only show users that have one or more groups.
JRA-7659 is more involved in that only specific groups should be
displayed in the user picker.

This difference is subtle, but only showing users that are in more than
one group would allow us to deactivate users."

[ Permlink | « Hide ]

Stephen Tan added a comment - 31/Oct/07 05:17 PM - edited

What files are associated with the user picker field? I looked at the "WEB-INF/classes/system-customfieldtypes-plugin.xml" and then looked at the API for "com.atlassian.jira.issue.customfields.impl.UserCFType". Has anyone tried modifying the UserCFType.java to allow only users within a groups or role to be selectable?

[ Permlink | « Hide ]

JP Patrikainen added a comment - 10/Jan/08 08:20 AM

This usability issue (because we have to disable user picker) and security risk, if we not disabling it.

User picker should show only those users which are in same groups as users has rights.

-JPP