Uploaded image for project: 'Admin Experience'
  1. Admin Experience
  2. AX-25

Uninstalling an app on one site affects permissions on another site

    • Severity 3 - Minor

      Issue Summary

      This is reproducible on 2 sites that are part of an org with Vortex enabled

      Steps to Reproduce

      1. Install the Forge app on site A
      2. Install the Forge app on site B
      3. Uninstall the Forge app from site A

      Expected Results

      The Forge app on site B continues working, with the same permissions

      Actual Results

      The Forge app on site B has its permissions revoked

      Workaround

      Re-install the app on site A, or;
      Un-install the app, and install it again on site B

      have both been reported to resolve the issue

            [AX-25] Uninstalling an app on one site affects permissions on another site

            Pinned comments

            We have successfully identified and resolved the root cause of the bug. All eligible customers utilizing the centralised user management system have had the patch applied. Consequently, revoking access to an app for one site will not affect the same app's permissions on other sites within the same organisation.

            If you have faced issues in the past and continue to experience problems, we encourage you to contact the Atlassian Support team. They are equipped to assist you in resolving these matters. Please note that the patch may not have been applied to your organisation due to the configuration of the linked directory, and we are unable to make any changes without your approval. Therefore, a manual process requiring your consent will be necessary.

            We deeply regret any inconvenience or frustration this caused and truly appreciate your patience and continued trust.

            Grzegorz Zgudka
            Engineer

            Grzegorz Zgudka added a comment - We have successfully identified and resolved the root cause of the bug. All eligible customers utilizing the centralised user management system have had the patch applied. Consequently, revoking access to an app for one site will not affect the same app's permissions on other sites within the same organisation. If you have faced issues in the past and continue to experience problems, we encourage you to contact the Atlassian Support team . They are equipped to assist you in resolving these matters. Please note that the patch may not have been applied to your organisation due to the configuration of the linked directory, and we are unable to make any changes without your approval. Therefore, a manual process requiring your consent will be necessary. We deeply regret any inconvenience or frustration this caused and truly appreciate your patience and continued trust. Grzegorz Zgudka Engineer

            All comments

            We have successfully identified and resolved the root cause of the bug. All eligible customers utilizing the centralised user management system have had the patch applied. Consequently, revoking access to an app for one site will not affect the same app's permissions on other sites within the same organisation.

            If you have faced issues in the past and continue to experience problems, we encourage you to contact the Atlassian Support team. They are equipped to assist you in resolving these matters. Please note that the patch may not have been applied to your organisation due to the configuration of the linked directory, and we are unable to make any changes without your approval. Therefore, a manual process requiring your consent will be necessary.

            We deeply regret any inconvenience or frustration this caused and truly appreciate your patience and continued trust.

            Grzegorz Zgudka
            Engineer

            Grzegorz Zgudka added a comment - We have successfully identified and resolved the root cause of the bug. All eligible customers utilizing the centralised user management system have had the patch applied. Consequently, revoking access to an app for one site will not affect the same app's permissions on other sites within the same organisation. If you have faced issues in the past and continue to experience problems, we encourage you to contact the Atlassian Support team . They are equipped to assist you in resolving these matters. Please note that the patch may not have been applied to your organisation due to the configuration of the linked directory, and we are unable to make any changes without your approval. Therefore, a manual process requiring your consent will be necessary. We deeply regret any inconvenience or frustration this caused and truly appreciate your patience and continued trust. Grzegorz Zgudka Engineer

            For those people who are considering uninstalling apps to try to work around the problem, be aware that uninstalling any Forge app that uses Forge Storage for persistency will generally also remove all of the app's data.

            Scott Dudley [Cenote] added a comment - For those people who are considering uninstalling apps to try to work around the problem, be aware that uninstalling any Forge app that uses Forge Storage for persistency will generally also remove all of the app's data .

            Hi,

            We experienced this issue once again yesterday when resetting our sandbox.

            We are now in the aftermath of trying to fix our production environment, where multiple add-ons stopped working.

            We've managed to reinstall the addons on production, however they are now all in an unlicensed state.
            On the sandbox, we are not able to reinstall the affected addons at all right now.

            It not only affects Forge apps, but any Marketplace addon.

            This should be considered a critical issue, as it can highly affect operations.

            Johannes Wiedmann added a comment - Hi, We experienced this issue once again yesterday when resetting our sandbox. We are now in the aftermath of trying to fix our production environment, where multiple add-ons stopped working. We've managed to reinstall the addons on production, however they are now all in an unlicensed state. On the sandbox, we are not able to reinstall the affected addons at all right now. It not only affects Forge apps, but any Marketplace addon. This should be considered a critical issue, as it can highly affect operations.

            Hi There After we've uninstalled the app (forge app) in the sandbox because the trial has expired, the same app has stopped working in the production (paid subscription). To fix the issue caused of this bug we were then forced to uninstall the app in production. Not to mention that we still have an issue in the sandbox where it is not possible to install a trial again after it was uninstalled... 
            Please consider updating the entire process for marketplace apps in the sandbox once app is purchased, we see many customers encounter issues... Thanks in advance!

            Bojana Vasic added a comment - Hi There After we've uninstalled the app (forge app) in the sandbox because the trial has expired, the same app has stopped working in the production (paid subscription). To fix the issue caused of this bug we were then forced to uninstall the app in production. Not to mention that we still have an issue in the sandbox where it is not possible to install a trial again after it was uninstalled...  Please consider updating the entire process for marketplace apps in the sandbox once app is purchased, we see many customers encounter issues... Thanks in advance!

            Hi There. This is negatively affecting customers that have both prod and sandbox accounts and would like to use our Behaviours Forge app on all of their sites, especially when testing Behaviours. The workaround is not sustainable going forward. I think we need a permanent resolution. Can this be escalated as an incident please as we are getting several product support tickets logged linked to this each month?

            Shabirah Abdullah added a comment - Hi There. This is negatively affecting customers that have both prod and sandbox accounts and would like to use our Behaviours Forge app on all of their sites, especially when testing Behaviours. The workaround is not sustainable going forward. I think we need a permanent resolution. Can this be escalated as an incident please as we are getting several product support tickets logged linked to this each month?

            This frequently starts to happen for Agile Hive Cloud for a single customer. That customer is using several sandboxes and starts to ramp up their testing. Every time they create a new sandbox or sync it, our app user gets deleted somehow. I am not sure what actually happens that's just the gist of what I was informed with.

            Lars-Erik Kimmel added a comment - This frequently starts to happen for Agile Hive Cloud for a single customer. That customer is using several sandboxes and starts to ramp up their testing. Every time they create a new sandbox or sync it, our app user gets deleted somehow. I am not sure what actually happens that's just the gist of what I was informed with.

            Aleksander Valler added a comment - - edited

            I have monitored such a behavior with App Balsamiq (Balsamiq Wireframes for Confluence Cloud) too. After uninstallation of App the specific user Balsamiq Wireframes for Confluence Cloud was no more available in Inspect permission of any Confluence page, but still visible at User permissions page of spaces. Therefore I think it has something to do with the App-user, see the ticket ECO-372 "When you uninstall an app from one site, it breaks the same app on other sites within the same organization".

            Aleksander Valler added a comment - - edited I have monitored such a behavior with App Balsamiq ( Balsamiq Wireframes for Confluence Cloud ) too. After uninstallation of App the specific user Balsamiq Wireframes for Confluence Cloud   was no more available in   Inspect permission  of any Confluence page, but still visible at  User permissions page of spaces. Therefore I think it has something to do with the App-user, see the ticket ECO-372 "When you uninstall an app from one site, it breaks the same app on other sites within the same organization".

              gzgudka@atlassian.com Grzegorz Zgudka
              dboyd@atlassian.com David Boyd
              Affected customers:
              42 This affects my team
              Watchers:
              53 Start watching this issue

                Created:
                Updated:
                Resolved: