Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-53509

"Edit details" shouldn't be available for Read-only users

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Low
    • None
    • 6.2.4, 6.3.1, 6.12.0, 6.14.1, 7.4.4, 7.4.8, 7.13.0
    • None

    Description

      Steps to reproduce

      1. Connect Confluence to a Delegating user directory;
        • Tick the options Copy User on Login and Update User attributes on Login;
      2. Test and Save;
      3. Log in with a LDAP user so that Confluence creates its profile;
      4. As a sysadmin, go to User Management, search for that user and click to view user;
      5. Click "Edit Details";
      6. Edit any field and Submit;

      Expected behavior

      Confluence shouldn't even display the Edit Details link, but if somehow we are able to access the details page, the fields should be grayed out (disabled) or at least display a friendly error message after pressing Submit.

      Actual Behavior

      It redirects to a System Error page with a huge Stack Trace:

      Cause
      com.atlassian.core.exception.InfrastructureException: com.atlassian.crowd.exception.OperationNotPermittedException: com.atlassian.crowd.exception.ApplicationPermissionException: Cannot update user 'lucas' because directory 'Delegated LDAP Authentication' does not allow updates.
          at bucket.user.DefaultUserAccessor.saveUser(DefaultUserAccessor.java:204)
      
      Stack Trace:[hide]
      com.atlassian.core.exception.InfrastructureException: com.atlassian.crowd.exception.OperationNotPermittedException: com.atlassian.crowd.exception.ApplicationPermissionException: Cannot update user 'lucas' because directory 'Delegated LDAP Authentication' does not allow updates.
      	at bucket.user.DefaultUserAccessor.saveUser(DefaultUserAccessor.java:204)
      	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
      	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      	at java.lang.reflect.Method.invoke(Method.java:498)
      
      
      	[...]
      
      

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              lmachado@atlassian.com Lucas Machado (Inactive)
              Votes:
              13 Vote for this issue
              Watchers:
              19 Start watching this issue

              Dates

                Created:
                Updated: