Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-35018

Ability to detect a deleted user in LDAP and disable that user

    • Icon: Suggestion Suggestion
    • Resolution: Duplicate
    • None
    • None
    • None
    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      If a user is deleted from LDAP, if using a connector user directory on the next sync it will delete that user from JIRA. It doesn't appear this follows some of the inbuilt restrictions around deleting users in the GUI - for example you can delete a user from LDAP and it will remove them even if they're assigned issues. This can leave all sorts of orphaned information and cause problems.

      Given we now have deactivate user functionality in JIRA, rather than deleting the user in JIRA can we deactivate the user? This would prevent us from getting into situations where deleting a user has caused problems in JIRA.

      Workaround

      Deactivate the user in the LDAP engine and JIRA rather then deleting them.

            [JRASERVER-35018] Ability to detect a deleted user in LDAP and disable that user

            dcurrie@atlassian.com
            JIRA will only keep the user account around if it detects that it is required for displaying historical data.
            So, if that user is the reporter, assignee, or a comment author on any issue, we keep the user and set to disable, otherwise we delete the account.

            Also, the deleting [ 1 ] users log is probably misleading: it will list how many useres it attempts to delete but some subset of these may get "vetoed" and be disabled instead.

            Mark Lassau (Inactive) added a comment - dcurrie@atlassian.com JIRA will only keep the user account around if it detects that it is required for displaying historical data. So, if that user is the reporter, assignee, or a comment author on any issue, we keep the user and set to disable, otherwise we delete the account. Also, the deleting [ 1 ] users log is probably misleading: it will list how many useres it attempts to delete but some subset of these may get "vetoed" and be disabled instead.

              Unassigned Unassigned
              dcurrie@atlassian.com Dave C
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: