-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Affects Version/s: 6.0.6, 6.3.1, 6.6.7, 6.7.1, 6.13.21, 7.4.11, 7.11.6, 7.12.5, 7.13.0, 8.5.4, 7.19.17
-
Component/s: User - Management
-
15
-
Severity 3 - Minor
-
2
Issue Summary
Enabling the Manage User Status Locally option on a connector user directory doesn't give the administrator an option to activate/deactivate users if the directory is configured as Read Only or as Read Only, with Local Groups.
This option is only available when connecting to "Microsoft Active Directory" type
Based on the description in our documentation:
Manage User Status Locally If true, you can activate and deactivate users in Crowd independent of their status in the directory server.
checking the "Manage User Status Locally" option should allow the administrator to activate/deactivate users even if the directory permission is set to Read Only or Read Only, with Local Groups.
If the administrator access the user details from a user provisioned by the external directory, the option to enable (activate) or disable (deactivate) the user isn't available on the UI.
Steps to Reproduce
- Install a vanilla instance of Confluence.
- Configure a connector Microsoft Active Directory as described in Connecting to an LDAP Directory.
- Make sure to configure it as a Read Only or Read Only, with Local Groups directory and to enable the Manage User Status Locally option.
- Confirm the user directory synchronization works as expected.
- Access a user details from any user synchronized from the external directory configured in steps above.
Expected Results
The option to enable or disable a user is available in the UI, since according to the documentation, the activate/deactivate status stays in Confluence(embeded Crowd) independent to the external directory.
Actual Results
The option to enable or disable a user is not available in the UI.
Workaround
Temporarily set the directory as Read/Write and manage the status of the target users.
After performing the actions, set the user directory to the previous configuration (read only or read only with local groups).