Multiple users in the same group in multiple directories appears to disallow the user being removed from the group from the Group Members page. The user is successfully removed from the group in the top directory only.

Steps to Reproduce

1. Create 'user1' in the Internal Directory
2. Create 'group1' in the Internal Directory
3. Create a 'Read only with Local groups' connection to an LDAP directory which contains 'user1'
4. Create an admin user in the LDAP, in the group confluence-administrators
5. Log in to Confluence with the LDAP administrator account
6. Disable the internal directory
7. Create 'group1' - this will create a local group in the LDAP directory in Confluence (not in the LDAP itself)
8. At this point you should have:
   • Two directories in cwd_directory
   • Two user1 records in cwd_user
   • Two group1 records in cwd_group
   • Two records in cwd_membership linking each user1 and group1 together in the correct directory
9. Re-enable the Internal Directory
10. Move the LDAP directory to the top of the list
11. Go to group1 in Confluence - you should now be on the Group Members page and you should see all users in the group
12. Click to delete user1
    • Observe that the screen appears to refresh but the user still appears in the list.
13. Check the database again. You will now have:
    • Two directories in cwd_directory
    • Two user1 records in cwd_user
    • Two group1 records in cwd_group
    • One record in cwd_membership linking user1 and group1 together in the Internal directory only.
14. This appears to be occurring because the user is successfully deleted from group1 in the LDAP directory, but still exists in group1 in the Internal directory. The list of members appears to be built from all active directories, whereas the delete function appears to only operate on the top directory.

Expected behaviour here is unclear. Should hitting 'delete' in the Group Members page remove the user from that group in all active directories? Or should the Group Members page only display the memberships in current directory?

Workarounds

1. Disable the directory that is not in use, so the user only exists in one directory
2. Remove the user from one directory