Users are unable to update their Confluence profile information

[Thorsten Letschert _Decadis AG_]

Hi there,

I'm currently facing the following issue:

Confluence is getting its user base from Jira which is linked to an Active-Directory-Server.

Users and groups are synchronised without problems. However, users are unable to update their profiles regarding phone, im, company details etc.

The logs read as follows:

-- referer: http://baseURL/confluence/users/editmyprofile.action | url: /confluence/users/doeditmyprofile.action | traceId: 771dde954419d38b | userName: user | action: doeditmyprofile
->[null]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT (Session #528037527)
2018-06-26 14:42:56,478 WARN [http-nio-8090-exec-94] [confluence.impl.hibernate.ConfluenceHibernateTransactionManager] doRollback Performing rollback. Transactions:
... 413 more
at com.atlassian.crowd.embedded.core.CrowdServiceImpl.updateUser(CrowdServiceImpl.java:363)
at com.atlassian.crowd.manager.application.ApplicationServiceGeneric.updateUser(ApplicationServiceGeneric.java:718)
at com.atlassian.crowd.manager.directory.DirectoryManagerGeneric.updateUser(DirectoryManagerGeneric.java:399)
at com.atlassian.crowd.directory.DbCachingRemoteDirectory.updateUser(DbCachingRemoteDirectory.java:617)
at com.atlassian.crowd.directory.RemoteCrowdDirectory.updateUser(RemoteCrowdDirectory.java:265)
at com.atlassian.crowd.integration.rest.service.RestCrowdClient.updateUser(RestCrowdClient.java:223)
at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecutor.andCheckResponse(RestExecutor.java:537)
at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecutor.throwError(RestExecutor.java:614)
Caused by: com.atlassian.crowd.exception.ApplicationPermissionException: <?xml version="1.0" encoding="UTF-8" standalone="yes"?><error><reason>APPLICATION_PERMISSION_DENIED</reason><message>Cannot update user 'user' because directory 'Active-Directory-Server' does not allow updates.</message></error>
at java.lang.Thread.run(Thread.java:748)

Usually, Confluence should only update those pieces of information within its own table OS_PROPERTYENTRY.

Any ideas, why Confluence is trying to update the user within the Active-Directory-Server?

Cheers,
Thorsten

[Daniel Eads]

Hi Thorsten,

Is the Jira directory (in Confluence) set up for Read/Write?

From your log, it looks to me like it is trying to call Jira to make those changes. Then Jira in turn is trying to modify those properties in Active Directory, which it doesn't appear to have permissions to do.

Try with the Jira User Directory in Confluence set to Read Only and let me know how it goes.

Cheers,
Daniel