Bug 55986 – School admins are removed from the wrong admin group when their schools change

Bug 55986 - School admins are removed from the wrong admin group when their schools change


Summary:	School admins are removed from the wrong admin group when their schools change

Status:	CLOSED FIXED

Product:	UCS@school
Classification:	Unclassified
Component:	Import scripts
Version:	UCS@school 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	J Leadbetter
QA Contact:	Carlos García-Mauriño

URL:	https://git.knut.univention.de/univen...
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2023-04-19 10:16 CEST by Jan-Luca Kiok
Modified:	2023-06-22 11:47 CEST (History)
CC List:	6 users (show)

See Also:	54368 41591 54888 53203
What kind of report is it?:	Bug Report
What type of bug is this?:	5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?:	3: Will affect average number of installed domains
How will those affected feel about the bug?:	3: A User would likely not purchase the product
User Pain:	0.257
Enterprise Customer affected?:
School Customer affected?:	Yes
ISV affected?:
Waiting Support:	Yes
Flags outvoted (downgraded) after PO Review:
Ticket number:	2023022721000444, 2023041421000045
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Jan-Luca Kiok

2023-04-19 10:16:10 CEST

A teacher was created with at least schools A and B and was made an admin in both schools.
If he is removed from school B via the import the importer removes him from the admin group of school A, but not B -> So he will lose his admin privileges of school A.

Additionally it was reported that this changes the ucsschool role attribute of the admin group.

Comment 1 Jan-Luca Kiok

2023-04-19 10:16:47 CEST

Log entry for a sample user where this happens: https://pastebin.knut.univention.de/HT7r74cZ

Comment 4 Stefan Gohmann

2023-04-24 12:23:36 CEST

(In reply to Jan-Luca Kiok from comment #0)
> A teacher was created with at least schools A and B and was made an admin in
> both schools.
> If he is removed from school B via the import the importer removes him from
> the admin group of school A, but not B -> So he will lose his admin
> privileges of school A.

We have a second customer with the same issue.

Comment 5 J Leadbetter

2023-05-02 18:03:04 CEST

Fix will be available in the following package:
```
Package: ucs-school-lib
Version: 13.0.36A~5.0.0.202305021757
```

Comment 6 J Leadbetter

2023-05-24 19:23:05 CEST

Errata updates for UCS@school 5.0 v3 have been released.

https://docs.software-univention.de/ucsschool-changelog/5.0v3/de/changelog.html

If this error occurs again, please clone this bug.

Comment 7 Johannes Keiser

2023-06-22 11:47:18 CEST

UCS@school Kelvin REST API in version 1.8.9 has been released.

If this error occurs again, please clone this bug.