[CONFSERVER-78296] Fast permissions do not support users with more than 1000 groups

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 7.17.2
Affects Version/s: 7.12.3
Component/s: Scale
Labels:
- scale-team

Support reference count:
1
Symptom Severity:
Severity 3 - Minor
UIS:
1
Bug Fix Policy:
View Atlassian Server bug fix policy

Issue Summary

Fast permissions do not process requests from users with more than 1000 users. Even though the fast permissions delegate processing to regular permission services, Confluence logs can have a lot of error messages.

This is reproducible on Data Center: yes

Steps to Reproduce

Create a user
Create 1001 groups
Assign all 1001 groups to the user
Log in as a user and view any page

Expected Results

No errors in logs

Actual Results

The below exception is thrown in the xxxxxxx.log file:

2022-03-01 00:00:00,000 ERROR [...] [security.denormalisedpermissions.impl.DenormalisedPermissionRouter] getPermittedSpaces Denormalised permission execution failed for space query com.atlassian.confluence.spaces.SpacesQuery@7fd0e11f. Exception: We do not support more that 1000 groups at this moment.
 -- url: /pages/viewpage.action...

Workaround

Either disable fast permissions or set error logging to FATAL for com.atlassian.confluence.security.denormalisedpermissions.impl.DenormalisedPermissionRouter class.

mentioned in: Page Failed to load

resolves: PSR-747 You do not have permission to view this issue

Form Name

Quan Pham made changes - 12/May/2022 11:59 PM

Remote Link

New: This issue links to "R7.13 P1. Baseline › WebDriver tests (Chrome 3.141.59) › issue-713-~~CONFSERVER-78296~~-support-more-than-1000-groups-in-inline-task-report-macro-2 (server-syd-bamboo)" [ 641756 ]

Quan Pham made changes - 12/May/2022 11:59 PM

Remote Link

New: This issue links to "R7.13 P1. Baseline › Transformed Plugins Ratchet Build › issue-713-~~CONFSERVER-78296~~-support-more-than-1000-groups-in-inline-task-report-macro-2 (server-syd-bamboo)" [ 641755 ]

Quan Pham made changes - 12/May/2022 11:59 PM

Remote Link

New: This issue links to "R7.13 P1. Baseline › Unit, Integration, CTK Tests › issue-713-~~CONFSERVER-78296~~-support-more-than-1000-groups-in-inline-task-report-macro-2 (server-syd-bamboo)" [ 641754 ]