Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-78296

Fast permissions do not support users with more than 1000 groups

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Low Low
    • 7.17.2
    • 7.12.3
    • Scale

      Issue Summary

      Fast permissions do not process requests from users with more than 1000 users. Even though the fast permissions delegate processing to regular permission services, Confluence logs can have a lot of error messages.

      This is reproducible on Data Center: yes

      Steps to Reproduce

      1. Create a user
      2. Create 1001 groups
      3. Assign all 1001 groups to the user
      4. Log in as a user and view any page

      Expected Results

      1. No errors in logs

      Actual Results

      The below exception is thrown in the xxxxxxx.log file:

      2022-03-01 00:00:00,000 ERROR [...] [security.denormalisedpermissions.impl.DenormalisedPermissionRouter] getPermittedSpaces Denormalised permission execution failed for space query com.atlassian.confluence.spaces.SpacesQuery@7fd0e11f. Exception: We do not support more that 1000 groups at this moment.
 -- url: /pages/viewpage.action...

      Workaround

      Either disable fast permissions or set error logging to FATAL for com.atlassian.confluence.security.denormalisedpermissions.impl.DenormalisedPermissionRouter class.

          Form Name

            [CONFSERVER-78296] Fast permissions do not support users with more than 1000 groups

              glipatov George Lipatov
              glipatov George Lipatov
              Affected customers:
              0 This affects my team
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: