Unable to remove group from Jira's Project Roles

お困りですか?

アトラシアン コミュニティをご利用ください。

コミュニティに質問

プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。

Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Fisheye および Crucible は除く

    

要約

Clicking in the Remove button to delete a group from the Project Role in Jira does not actually remove group.

No errors are shown.

環境

Jira connected to Crowd or LDAP.

診断

Group is associated to multiple User Directories with different casing.

This can be confirmed with the SQL query below in Jira's database.

select G.group_name, D.directory_name, D.directory_position 
from cwd_group G
join cwd_directory D on G.directory_id = D.id
where lower_group_name = '<group name in lower cases>'
order by D.directory_position ;

原因

原因 1:

Group has different casing than what is associated to the top User Directory as example below.

jira-software-users

Jira Internal Directory

0

Jira-Software-Users

Active Directory サーバー

1

原因 2:

No groups are returned by the query above, meaning the group has been removed from the cwd_group table but the project role reference was kept. This can happen when we have an incorrect collation in the database.


ソリューション

原因 1:

  1. Move Directory with the same casing above the other directories
  2. Remove group from Project Role
  3. Move Directory to the original position

Please note moving directory position may change user's group membership and cause permission problems while the change is being made so it may be safer to schedule the fix for off-business hours.

原因 2:  

  1. Create a new group with the same name in Jira's internal directory
  2. Remove the group from the project role
  3. Remove the group from Jira

The current behaviour of crowd/LDAP groups is that when the deletion is done from the crowd/LDAP side and it gets synched to Jira, the operation to cascade deletion of the group from roles does not happen. This is documented in the bug tickets below:

JRASERVER-70842 - 課題詳細を取得中... ステータス

JRASERVER-73108 - 課題詳細を取得中... ステータス


最終更新日 2022 年 11 月 23 日

この内容はお役に立ちましたか?

はい
いいえ
この記事についてのフィードバックを送信する
Powered by Confluence and Scroll Viewport.