Summary

Users are partially able edit their user details even though the user belongs to a directory with a Delegated authentication.

Steps to Reproduce

1. Have a Confluence connected to a user directory with a Delegated LDAP Authentication settings
2. Make sure that the user from that directory can log in.
3. Edit the user details from the "Edit Profile" page:
   1. Login as the user
   2. Go to their Profile
   3. Click "Edit Profile".
   4. Type a text in the "About me" box.

Expected Results

The user will be able to edit the fields or should see a warning saying that delegated users should not be able to edit those fields.

Actual Results

Error is thrown in the logs and the UI:

2019-04-04 13:31:17,819 ERROR [http-nio-8090-exec-17] [atlassian.confluence.servlet.ConfluenceServletDispatcher] sendError Could not execute action
 -- referer: https://confluence.usf.edu/users/editmyprofile.action | url: /users/doeditmyprofile.action | traceId: 772e5db83b6cf8b6 | userName: gviana
com.atlassian.core.exception.InfrastructureException: com.atlassian.crowd.exception.OperationNotPermittedException: com.atlassian.crowd.exception.ApplicationPermissionException: Cannot update user 'gviana' because directory 'Delegated LDAP Authentication' does not allow updates.
	at bucket.user.DefaultUserAccessor.saveUser(DefaultUserAccessor.java:208)

Workaround

Use a Connector Directory