Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-70211

Adding the same group from different directories has unexpected results

    XMLWordPrintable

Details

    Description

      Issue Summary

      Adding the same user group from local and active directory causes unexpected results. Variation on this can occur using the same name but with one letter cased differently.

      Steps to Reproduce

      1. add at least one active directory in Jira's User Directories
      2. create a local group, for example 'Production'. Add a global share permission to the group, in Jira.
      3. create a group in the added User Directory, for example 'production', add some users to it

      Expected Results

      The groups are seen separately in Jira and function independently. Global share permission can be removed or added to each group.

      Actual Results

      The groups are merged. The local user memberships are no longer visible.
      Also some functionalities like removing global share permissions can no longer be controlled (as removing fails silently).

      Workaround

      Global share permission can be removed from database directly, for example:

      DELETE FROM public.globalpermissionentry WHERE PERMISSION='CREATE_SHARED_OBJECTS' AND GROUP_ID='jira-test'
      

      Notes

      see also:

      1. https://jira.atlassian.com/browse/JRASERVER-66032 (when using same group name)
      2. https://jira.atlassian.com/browse/JRASERVER-66599 (when using same group name + space)

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              emarghidan Eduard M
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated: