Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-32702

Disabled users In JIRA/LDAP still appear in Confluence in the People directory and can still be mentioned in pages

      NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.

      I have a Remote JIRA Directory (Type "Atlassian Crowd"). JIRA is in version 6.1.7.
      Users which are disabled in JIRA still appear in the People Directory in Confluence. Also, these disabled users appear in the suggestion list when typing @ (in page edit mode) to mention a user on a page.
      We have a very long list of disabled users in JIRA and the fact that they appear in Confluence is very confusing and a critical issue for us.

            [CONFSERVER-32702] Disabled users In JIRA/LDAP still appear in Confluence in the People directory and can still be mentioned in pages

            Cédric Joly [OUTSCALE] added a comment - - edited

            Hi,

            I've found a little workaround for this problem. It seems that when you de-activate a user, she still gets a password set ; in the same time, the Personal Directory lists all users with a password set. So, you may unset the password for the deactivated users and they won't appear anymore in the Personal Directory. EDIT : it also deactivates the ability to mention these deactivated users.

            I didn't find any way to unset a password through the web interface, which means that eventually you have to manually update your database...

            If you use a SQL DB, this request will do the job :
            update cwd_user set credential = "nopass" where active = "F";
            (cwd_user is the users table, credential is "X" if a password is set or "nopass" else, and active is "T" or "F" regarding the user is active or not)

            Cheers

            Cédric Joly [OUTSCALE] added a comment - - edited Hi, I've found a little workaround for this problem. It seems that when you de-activate a user, she still gets a password set ; in the same time, the Personal Directory lists all users with a password set. So, you may unset the password for the deactivated users and they won't appear anymore in the Personal Directory. EDIT : it also deactivates the ability to mention these deactivated users. I didn't find any way to unset a password through the web interface, which means that eventually you have to manually update your database... If you use a SQL DB, this request will do the job : update cwd_user set credential = "nopass" where active = "F"; ( cwd_user is the users table, credential is "X" if a password is set or "nopass" else, and active is "T" or "F" regarding the user is active or not) Cheers

            david.shilson added a comment - - edited

            Hi is there a fix for this yet? We are encountering it in JIRA 6.4.4 using a Crowd backend, with users that have been individually disabled. We are getting complaints from our users about it. Duplicate users appear in the @ and ~ lists to link users to cases.

            david.shilson added a comment - - edited Hi is there a fix for this yet? We are encountering it in JIRA 6.4.4 using a Crowd backend, with users that have been individually disabled. We are getting complaints from our users about it. Duplicate users appear in the @ and ~ lists to link users to cases.

            I'understand. You service desk agent led me to this issue.

            Tomasz Belina added a comment - I'understand. You service desk agent led me to this issue.

            To be clear: tomasz.belina2 I take it in your environment it's not the individual users that are disabled, but a whole remote user directory. This issue addressed deactivating individual users in an enabled remote user directory.

            In the case of deactivating an entire directory, there's nothing listening for the underlying DirectoryUpdatedEvent to reindex all the affected users, so they are left as if they're enabled, cluttering the UI in the people directory and mention autocomplete. Similarly, we currently fail to reindex the users affected when reordering user directories (https://jira.atlassian.com/browse/CONF-36277), which can mean that we fail to detect when a user's full name, email address or other user attribute change due to user shadowing. We'll have to address both of these use cases when resolving that issue.

            Richard Atkins added a comment - To be clear: tomasz.belina2 I take it in your environment it's not the individual users that are disabled, but a whole remote user directory. This issue addressed deactivating individual users in an enabled remote user directory. In the case of deactivating an entire directory, there's nothing listening for the underlying DirectoryUpdatedEvent to reindex all the affected users, so they are left as if they're enabled, cluttering the UI in the people directory and mention autocomplete. Similarly, we currently fail to reindex the users affected when reordering user directories ( https://jira.atlassian.com/browse/CONF-36277 ), which can mean that we fail to detect when a user's full name, email address or other user attribute change due to user shadowing. We'll have to address both of these use cases when resolving that issue.

            In my case it is very simple. I've notice this problem in version 5.6.5 and according to advice I got from Atlassian Service Desk (https://support.atlassian.com/servicedesk/customer/portal/14/CSP-148446) problem should be solved in version 5.8.4. So I've migrated confluence to this version and problem still exists.
            I've made a site export and it looks like there is no "InternalUser" object for users from disabled directory.

            Tomasz Belina added a comment - In my case it is very simple. I've notice this problem in version 5.6.5 and according to advice I got from Atlassian Service Desk ( https://support.atlassian.com/servicedesk/customer/portal/14/CSP-148446 ) problem should be solved in version 5.8.4. So I've migrated confluence to this version and problem still exists. I've made a site export and it looks like there is no "InternalUser" object for users from disabled directory.

            Minh Tran added a comment -

            Hi niebieski,

            Could you share with us the steps to reproduce that you did for 5.8.4?

            Thanks,
            Minh Tran
            Confluence BugMaster

            Minh Tran added a comment - Hi niebieski , Could you share with us the steps to reproduce that you did for 5.8.4? Thanks, Minh Tran Confluence BugMaster

            On confluence 5.8.4 issue still exists.

            Tomasz Belina added a comment - On confluence 5.8.4 issue still exists.

            IT Team added a comment -

            We got the same issue here. The workaround with enabling and disabling is no alternative for we have to many users to manage.

            IT Team added a comment - We got the same issue here. The workaround with enabling and disabling is no alternative for we have to many users to manage.

            james.dellow This should already be in Cloud, as it was fixed as part of a previous issue. Note that this is for inactive (deactivated) users only. For active users that have Confluence access revoked check https://jira.atlassian.com/browse/CONF-19116

            Xavier Sanchez added a comment - james.dellow This should already be in Cloud, as it was fixed as part of a previous issue. Note that this is for inactive (deactivated) users only. For active users that have Confluence access revoked check https://jira.atlassian.com/browse/CONF-19116

            Will this also be rolled out to Confluence Cloud?

            James Dellow added a comment - Will this also be rolled out to Confluence Cloud?

              xtaixe Xavier Sanchez
              e581d3f85a1b Patrick Mouret
              Affected customers:
              27 This affects my team
              Watchers:
              40 Start watching this issue

                Created:
                Updated:
                Resolved: