Bug 54422 – $OU-import-all groups have no ucsschoolRole

Bug 54422 - $OU-import-all groups have no ucsschoolRole


Summary:	$OU-import-all groups have no ucsschoolRole

Status:	NEW

Product:	UCS@school
Classification:	Unclassified
Component:	UMC - User Import UI
Version:	UCS@school 5.0
Hardware:	Other Windows NT

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UCS@school maintainers
QA Contact:

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2022-02-07 08:40 CET by Michael Grandjean
Modified:	2022-02-07 08:41 CET (History)
CC List:	0 users

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?:	4: Will affect most installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.137
Enterprise Customer affected?:
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Michael Grandjean

2022-02-07 08:40:25 CET

root@ucs-001:~# univention-app info
UCS: 5.0-1 errata203
Installed: radius=5.0 self-service=5.0 self-service-backend=5.0 ucsschool=5.0 v1 4.4/ucsschool-veyon-proxy=1.1
Upgradable:

Looks like Bug #48252 and #48647 didn't cover the groups that grant the import permissions for the User Import UI ($OU-import-all):

root@ucs-001:~# univention-ldapsearch -LLL '(&(cn=*-import-all)(ucsschoolRole=*))' 1.1
root@ucs-001:~#

root@ucs-001:~# univention-ldapsearch -LLL cn=DEMOSCHOOL-import-all ucsschoolRole
dn: cn=DEMOSCHOOL-import-all,cn=groups,ou=DEMOSCHOOL,dc=example,dc=org