Group confluence-administrators Should Not Be Deletable

Summary

If there are more than one group with System Administrator permissions, then the group confluence-administrators can be deleted. When re-adding the group the checkboxes for permissions cannot be changed (i.e. set to on)

Environment

• Confluence 6.4.0

Steps to Reproduce

1. Ensure there is more than one group with System Administrator permissions
   1. Go to > User Management > Groups
   2. Create a new group confluence-system-administrators
   3. Click Add Members and add yourself
   4. Go to Global Permissions
   5. Click Edit Permissions
   6. Enter confluence-system-administrators to Grant browse permission to and click Add
   7. Check all checkboxes Personal Space, Create Space(s), Confluence Administrator, System Administrator
   8. Click Save All at the bottom
2. Go to > User Management > Groups
3. Click Delete next to confluence-administrators
4. Click Confirm
5. Go to > User Management > Groups
6. (Re) Create a new group confluence-administrators
7. Click Add Members and add yourself
8. Go to Global Permissions
9. Click Edit Permissions
10. Enter confluence-administrators to Grant browse permission to and click Add

The checkboxes for Personal Space, Create Space(s), Confluence Administrator, System Administrator are now greyed out and cannot be clicked.

Expected Results

Either

• The checkboxes for Personal Space, Create Space(s), Confluence Administrator, System Administrator can be clicked.
• The group confluence-administrators should not be deletable.

Actual Results

The checkboxes for Personal Space, Create Space(s), Confluence Administrator, System Administrator are now greyed out and cannot be clicked.

Notes

The check boxes are not changable because confluence-administrators is a super-super user group. And so the permissions should not be changed. Thus, the group should not be deletable.

Workaround

The SQL for the permissions needs to be re-inserted. This may cause issues later if there is a collision with the permid value.

1. Create the group confluence-administrators via the UI
2. Shutdown Confluence
3. Run this SQL (this is for PostgreSQL)

   insert into spacepermissions (permid, permtype, permgroupname, creationdate, lastmoddate) values (1000, 'CREATESPACE', 'confluence-administrators', current_timestamp, current_timestamp);
   insert into spacepermissions (permid, permtype, permgroupname, creationdate, lastmoddate) values (1001, 'PERSONALSPACE', 'confluence-administrators', current_timestamp, current_timestamp);
   insert into spacepermissions (permid, permtype, permgroupname, creationdate, lastmoddate) values (1002, 'SYSTEMADMINISTRATOR', 'confluence-administrators', current_timestamp, current_timestamp);
   insert into spacepermissions (permid, permtype, permgroupname, creationdate, lastmoddate) values (1003, 'ADMINISTRATECONFLUENCE', 'confluence-administrators', current_timestamp, current_timestamp);
   

4. Restart Confluence