Uploaded image for project: 'Confluence Server'
  1. Confluence Server
  2. CONFSERVER-16456

Remove group fails if any group permissions set

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Low
    • Resolution: Won't Fix
    • Affects Version/s: 3.0
    • Fix Version/s: None
    • Component/s: None
    • Environment:

      Confluence standalone 3.0.0_01
      JDK 1.6.0_12

    • Internal Complexity:
      5
    • Internal Value:
      4

      Description

      Group administration screen allows you to Remove groups. When you select a group that has permissions associated with it (but in our case, there were no users who were members of this group) and click Remove you are given a list of spaces (but not personal spaces) and space permissions associated with the group. Then at the bottom of that list is a Confirm button to agree that you will lose all these permissions, etc. Click Confirm and you get an error message with the following trace:

      2009-07-23 14:18:59,579 ERROR [http-8080-5] [atlassian.confluence.servlet.ConfluenceServletDispatcher] sendError Could not execute action
       -- url: /admin/users/doremovegroup.action | userName: admin | referer: http://baseurl/admin/users/removegroup-confirm.action?atl_token=XdXImNHCIl&name=bsr
      java.lang.NullPointerException
      	at com.atlassian.confluence.security.ContentPermission.compareTo(ContentPermission.java:197)
      	at java.util.TreeMap.put(TreeMap.java:545)
      	at java.util.TreeSet.add(TreeSet.java:238)
      	at java.util.AbstractCollection.addAll(AbstractCollection.java:305)
      	at java.util.TreeSet.addAll(TreeSet.java:295)
      

      If you then go through and manually find all the spaces and remove the group from the permissions list for each space then you can finally remove the group. Big problem if the group has access to personal spaces as the only way you can find that out is by querying the database - the personal space permissions do not show up on the aforementioned permissions listing.

      You should be able to actually remove a group and all its permissions as long as there are no members of the group. Group removal should not be restricted to cases where there are also no permissions associated with the group, especially because it is impossible to see all the group's permissions (i.e. personal spaces) without querying the database manually.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Last commented:
                  4 years, 10 weeks ago