Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-3136

'Nested groups' setting is ignored by delegated authentication directories

XMLWordPrintable

      Symptoms

      Users can enable and disable nested groups support for Delegated Directories in applications that embed Crowd 2.6.0 (plugin version 1.6.0). The setting is persisted, because subsequent updates retain the value. However, when a user authenticates successfully, the group-to-group memberships are not copied to the database, and therefore not taken into account.

      Steps to reproduce

      1. Set up an LDAP directory (e.g., OpenLDAP) with two groups (group1 and group2). Make group1 a parent of group2. Create a user who is a member of group2 but not of group1.
      2. Create a Delegated Directory in Confluence 5.0-beta4 (which embeds Crowd 2.6.0). Enable "nested groups", "copy user details" and "copy group details".
      3. Log out from Confluence. Log in again using the credentials of the LDAP user created in step 1. Authentication should succeed.
      4. Go to group browser to see a list of all groups.

      Expected result

      The list should contain "group1", since the user is an indirect member, and therefore, the group details should have been copied when he authenticated. Moreover, by clicking in "group1" it should be possible to see that it has "group2" as its member.

      Actual result

      "group1" does not appear on the list.

      Notes

      The issue cannot be reproduced in standalone Crowd because of a side-effect of CWD-3137. However, it has been verified in a feature branch of standalone Crowd with the fix for CWD-3137 in it.

            [CWD-3136] 'Nested groups' setting is ignored by delegated authentication directories

            Monique Khairuliana (Inactive) made changes -
            Workflow Original: Simplified Crowd Development Workflow v2 - restricted [ 1511090 ] New: JAC Bug Workflow v3 [ 3365588 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            vkharisma made changes -
            Link New: This issue blocks JRACLOUD-25709 [ JRACLOUD-25709 ]
            vkharisma made changes -
            Link New: This issue relates to CONFCLOUD-27032 [ CONFCLOUD-27032 ]
            Owen made changes -
            Workflow Original: Simplified Crowd Development Workflow v2 [ 1393140 ] New: Simplified Crowd Development Workflow v2 - restricted [ 1511090 ]
            Owen made changes -
            Workflow Original: Crowd Development Workflow v2 [ 463861 ] New: Simplified Crowd Development Workflow v2 [ 1393140 ]
            Diego Berrueta made changes -
            Remote Link New: This issue links to "Wiki Page (Extranet)" [ 38057 ]
            Diego Berrueta made changes -
            Story Points New: 1
            Matt Ryall made changes -
            Comment [ Lorem ipsum dolor sit er elit lamet, consectetaur cillium adipisicing pecu, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum. Nam liber te conscient to factor tum poen legum odioque civiuda. ]
            Diego Berrueta made changes -
            Link New: This issue blocks JRA-25709 [ JRA-25709 ]
            Diego Berrueta made changes -
            Link New: This issue relates to CONF-27032 [ CONF-27032 ]

              dberrueta Diego Berrueta
              dberrueta Diego Berrueta
              Affected customers:
              0 This affects my team
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: