[jira] Commented: (JSPWIKI-507) Management of group members

["Janne Jalkanen (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/JSPWIKI-507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12673880#action_12673880 ] 

Janne Jalkanen commented on JSPWIKI-507:
----------------------------------------

I'm not sure whether this is really a problem - you can always even delete all the user accounts and end up with invalid groups.  

What is the problem if there are groups which contain only invalid/zero members?  They're not taking resources... The admin can always delete them - perhaps it would be useful to have a tool which detected them...

(I fear that trying to second-guess all possible combinations for users and groups is simply too difficult - especially if user management is externalized to LDAP or something similar.  There's no way to know when an user is removed, for example.)


> Management of group members
> ---------------------------
>
>                 Key: JSPWIKI-507
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-507
>             Project: JSPWiki
>          Issue Type: Bug
>    Affects Versions: 2.8.1
>            Reporter: Bruno Peeters
>
> It is possible to define members for a group who are not defined in the wiki. There is no check whether the entered names are valid wiki names or full names.
> It is possible to edit the membership of a group ("edit group"). If the last user of a group is removed - the box showing the group members is empty - and the save button is clicked, there is no warning that it is not possible to remove the last user of a group. Although the user may think that he removed the last user, the requested removal has not been carried out.
> If a group is created by a valid user, and a non existing user is added, and finally the creator of the group removes himself of the list of group members, the group remains with only one member, not defined within the wiki. By default only members of the group can edit the membership list. There is currently no check that the last remaining user of a group is indeed a valid wiki user.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.