Uploaded image for project: 'Identity'
  1. Identity
  2. ID-6186

'administrators' group should not be removable in User Management

    XMLWordPrintable

Details

    Description

      Summary

      The 'administrator' group is used for mapping user permissions to log into WebDAV. If a user removes this group, they will no longer be able to log into WebDAV.

      Environment

      Cloud

      Steps to Reproduce

      1. Add users to the 'administrators' group
      2. Remove the 'administrators' group from User Management
      3. Attempt to log into WebDAV

      Expected Results

      User should be able to log into WebDAV

      Actual Results

      User cannot log into WebDAV/

      Notes

      Removing the 'administrators' group from User Management causes a break in the 'cwd_app_dir_group_mapping' table within the Crowd database.

      crowd=> select * from cwd_app_dir_group_mapping;
         id   | app_dir_mapping_id | application_id | directory_id |        group_name
      --------+--------------------+----------------+--------------+---------------------------
       229377 |             196609 |              2 |        32769 | system-administrators
       229389 |             196615 |              8 |        32769 | system-administrators
       229391 |             196620 |             11 |        32769 | system-administrators
       229392 |             196609 |              2 |        32769 | site-admins
       229393 |             196609 |              2 |        32769 | confluence-administrators
       229394 |             196609 |              2 |        32769 | atlassian-addons
       229390 |             196615 |              8 |        32769 | administrators
      (7 rows)
      

      Workaround

      Support is able to remap the 'administrators' group so WebDAV access is restored

      insert into cwd_app_dir_group_mapping values (229390, 196615, 8, 32769, 'administrators');
      

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              mlavender mlavender (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: