Uploaded image for project: 'Crowd'
  1. Crowd
  2. CWD-1263

Provide flag to filter users/groups to client applications based on application's permission to authenticate.

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Needs Verification
    • Priority: Medium
    • Resolution: Unresolved
    • Affects Version/s: 1.5, 2.11.0
    • Fix Version/s: None
    • Component/s: Integration/Connectors
    • Labels:

      Description

      When a directory is associated with an application in Crowd, all users and groups returned by the scope of the directory configuration are displayed in client applications. We should provide the ability to filter users/groups for client apps based on the ability to authenticate in the client app.

      • Setup an LDAP server with users, only some are added to a group.
      • Add the LDAP directory to crowd
      • Login to crowd and under Applications, click on "Add Application".
      • In the directories tab, remove the internal directory and add the LDAP directory (allow all to authenticate = false)
      • In the groups tab, add the LDAP group
      • Go to the users tab.

      Expected: Only users from the LDAP group to be present, the rest have no permission to authenticate and are not part of the valid groups.
      Actual: All users from the directory are present.

      This is a design decision in Crowd, as most customers want all users and groups to be present, regardless of the ability to authenticate. We may consider providing a toggle for this behaviour in the future, but it's not on a roadmap at present.

        Attachments

          Issue Links

          blocks

          Bug - A problem which impairs or prevents the functions of the product. BAM-4801 Integration with Crowd explodes user count

          • Low - Low priority issues
          • Open

          Suggestion - JSDSERVER-5437 Indicate in JSD when customer is in Crowd and has no permission to authenticate

          • Gathering Interest

          Suggestion - FE-6522 Crowd users not allowed to authenticate are pulled in as normal users

          • Medium - Medium priority issues
          • Gathering Interest
          causes

          Bug - A problem which impairs or prevents the functions of the product. BSERV-10046 Connecting with Crowd causes Bitbucket Server to synchronize all users and groups in directory

          • Medium - Medium priority issues
          • Closed
          is blocked by

          New Feature - A new feature of the product, which has yet to be developed. CWD-1348 Client applications should only see principals which have been authorised to access the application

          • Low - Low priority issues
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. CWD-432 Client applications should only see groups which have been allocated to them

          • Medium - Medium priority issues
          • Verified
          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. CWD-5185 Improve users visibility limitation mechanism

          • Medium - Medium priority issues
          • Closed
          mentioned in

          Page Loading...

          Page Loading...

          Page Loading...

          was cloned as

          KRAK-452 Loading...

            Activity

              People

              • Votes:
                29 Vote for this issue
                Watchers:
                33 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Last commented:
                  1 year, 5 weeks, 2 days ago