Bug 46702

Summary:	Portal entry visibility is broken if memberof overlay is deactivated
Product:	UCS	Reporter:	Jannik Ahlers <ahlers>
Component:	Portal	Assignee:	Ingo Steuwer <steuwer>
Status:	CLOSED WONTFIX	QA Contact:	Florian Best <best>
Severity:	normal
Priority:	P5	CC:	ahlers, best, botner, gohmann, hahn, heidelberger, keiser, requate, steuwer, wiesenthal
Version:	UCS 5.0
Target Milestone:	UCS 5.0
Hardware:	Other
OS:	Linux
What kind of report is it?:	Bug Report	What type of bug is this?:	4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?:	2: Will only affect a few installed domains	How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.091	Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:
Bug Depends on:	46270
Bug Blocks:	46277, 46336, 46391, 46476

Description Jannik Ahlers

2018-03-20 09:12:17 CET

+++ This bug was initially created as a clone of Bug #46270 +++

The function to make a portal entry visible for members of a specific group only is dependent on the memberof-overlay, and therefore doesn't work if the overlay is deactivated (see bug 46476). I think there should at least be a visible hint of this, as to my knowledge memberof is deactivated by default on upgraded systems.

Comment 1 Valentin Heidelberger

2018-07-04 17:32:38 CEST

+1

Besides, is there a technical reason to not do

ldap/overlay/memberof=true
/usr/share/univention-ldap-overlay-memberof/univention-update-memberof

automatically during the upgrade to 4.3?
It might bloat the LDAP unnecessarily if the customer doesn't intend to use the feature, of course.

Comment 2 Florian Best

2020-06-22 11:40:10 CEST

This will be adresses in UCS 5.0 where the memberof overlay is enforced. The bug can then be marked as duplicate.

Comment 3 Ingo Steuwer

2020-08-28 10:27:47 CEST

Activating memberOf is default since 4.4-0 (or earlier?) and checked at least since 4.4-4 and is announced to be mandatory for UCS 5.0.

I think we can close this one.

Comment 4 Florian Best

2021-03-02 17:42:39 CET

(In reply to Ingo Steuwer from comment #3)
> Activating memberOf is default since 4.4-0 (or earlier?) and checked at
> least since 4.4-4 and is announced to be mandatory for UCS 5.0.
> 
> I think we can close this one.

We only have a diagnostic warning check (58_check_memberOf.py) which informs about a not enabled memberof overlay module.
UCS 5 still provides the functionality to deactivate the memberof module.

Not sure if I can say WORKSFORME then. I am okay with WONTFIX.
@Ingo: Reopen if you disagree.

Comment 5 Florian Best

2021-05-25 16:00:03 CEST

UCS 5.0 has been released:
 https://docs.software-univention.de/release-notes-5.0-0-en.html
 https://docs.software-univention.de/release-notes-5.0-0-de.html

If this error occurs again, please use "Clone This Bug".