-
Suggestion
-
Resolution: Won't Do
-
None
NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.
With fine-grained automated "External User Management" control, it will be useful in some set ups to allow admin to set the Internal Directory as enabled but read-only.
In particular if most your User management is done through a read-only LDAP or Crowd server, it is actually good practise to leave at least one System Admin user in the Internal Directory.
This user is used to edit the settings for the LDAP directory, and also in case of emergency if the LDAP server is no longer reachable (eg it changes IP address / port number etc).
Currently this means that JIRA has to assume that User Management is in general "writable", so it shows the "Forgot Password" link on the login page, there is an "Add User" button on User Browser etc.
Being able to set the Internal Directory to Read-Only would fix this.
- is duplicated by
-
JRASERVER-27280 External user management option is on and users are still able to change their own passwords
- Closed
- is related to
-
JRASERVER-25923 More fine grained control of External User Management
- Closed
- relates to
-
JRASERVER-27280 External user management option is on and users are still able to change their own passwords
- Closed
-
JRACLOUD-25924 Allow configuring the Internal Directory to be "Read Only"
- Closed
-
JRASERVER-30025 Login gadget should display different details if using External User Management.
- Closed