Misleading errormessage when trying to edit a nonexisting users group (via direct URL-access)

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Low
    • 2.5.4, 2.6.0
    • Affects Version/s: None
    • Component/s: None

      editusergroups-start.action does not check if a user actually exists:

      If a non-existing username is passed as a parameter in the URL below:

      http://<hostname>/admin/users/editusergroups-start.action?username=dummyuser

      it does not give an error for the non-existing user, instead Confluence displays the message "User is not a member of any group" (screenshot is attached).
      If any one of the available groups is selected and then click on the "Join>>" button, the user is redirected to this page instead:
      http://<hostname>/admin/console.action

      A check should be made for non-existing users and a message such as "User does not exist" should be displayed when the above URL (http://<hostname>/admin/users/editusergroups-start.action?username=dummyuser) is accessed.

        1. dummyuser.PNG
          23 kB
          Gurleen Anand

              Assignee:
              Anatoli
              Reporter:
              Gurleen Anand
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: