Description Frank Greif 2023-07-28 17:27:39 CEST

UCS 5.0.4, ucs@school 5.0v3

Under certain circumstances, the import forgets to add users to the '<role>-<school>' and 'domain users <school>' groups. Reproducible as follows:

* make a simple import that adds an user to classes at multiple schools: school=schoolA, schools=schoolA,schoolB, classes=schoolA-class1,schoolB-class2 -> this works as expected.
* make a second import for the same user (matching source_id and record_id) which adds him to a third school: schools=schoolA,schoolB,schoolC, classes=SchoolA-class1,schoolB-class2,schoolC-class3.

Result: the importer does not add the user to the 'students-schoolC' and 'Domain Users schoolC' groups. (roles are correct, and membership in the class groups too)

With verbose import logging, one can see the "Adding ImportStudent(...) to groups ..." entry, but here the mentioned groups are missing.

Immediately following are entries: "Getting ImportStudent UDM object by filter (uid=...)" and the next log line says "UCS@school Object ... has validation errors: is not part of schools: ['schoolC']."

The docs in https://docs.software-univention.de/ucsschool-import/5.0/de/spanning-accounts.html#schulubergreifende-benutzerkonten do not explicitly say anything about class memberships -- what is the expected behaviour here?