Delegated directory with "Add Users" permission disabled still automatically adds users upon authentication.

Issue Summary

When setting a Delegated directory in Crowd and disabling the "Add Users" permission in the directory configuration withing the Application section, the user still gets automatically created upon login into the client application.

Steps to Reproduce

1. Have a Delegated Authentication Directory
2. In the Directory Permission Setting, disabling the "Add Users" permission
3. Add this directory into Crowd Application
4. Login to Crowd as one of the user from the Delegated LDAP

Expected Results

Users should not be able to login as users does not exist, and the "Add Users" permission is disabled.

Actual Results

Users will have successful login and users will get created in Crowd

Workaround

Manually disable the Automatic User Creation in Delegated directory from the database side. This is done by modifying the value of crowd.delegated.directory.auto.create.user to false in the cwd_directory_attribute table, in the database
The steps are:

1. identify the directory ID of the affected directory

   select id,directory_name from cwd_directory;
   

2. check if the attribute_value is set to "true" for the attribute crowd.delegated.directory.auto.create.user

   select * from cwd_directory_attribute where  attribute_name='crowd.delegated.directory.auto.create.user' and directory_id=<directory_id> ;
   

   if the value is set to true, proceed with the next step

3. backup Crowd's database
4. update the table cwd_directory_attribute to force the auto-creation to false

   update cwd_directory_attribute set attribute_value='false' where attribute_name='crowd.delegated.directory.auto.create.user' and directory_id=<directory_id>
   

5. restart Crowd for the changes to take effect