application access has been removed.

[gagan m s]

Hello,

i found that many user application access has been removed.

can we find all the users through DB whose application access has been removed?

can give them back the application access through SQL?

NOTE: their account status active, only the application access(jira-software) has been removed.

[Nic Brough -Adaptavist-]

>can we find all the users through DB whose application access has been removed?

Not easily, and it may depend on what user directory you are using.  It's probably going to be a search through cwd_user joined to cwd_membership, and not a simple one.  But you really need to consider what your user directory is first.

>can give them back the application access through SQL?

Almost certainly not.  Never change a Jira database except via the API, unless it's offline and you know exactly what you are doing.  (99.9% of people who think they do, are wrong)

Add them back via the UI.

[gagan m s]

thank you Nick.

i will not risk it.

but how can i get the users who has been deprived of access to application?

[gagan m s]

my user directory in internal..

sw is JIRA server

[Nic Brough -Adaptavist-]

Internal means we know everything you need is in the two tables I mentioned, but I'd still do it in the UI.

However you do it, what you need to do is subtract.

• First, get the list of all users.
• Second, go to "manage applications" and check what group(s) have access to the application(s)
• Third, get a list of all users in those groups (may need to deduplicate it)
• Finally, subtract the users with access from the list of all users.  

You now have a list of people without access.  This may not be what you mean by "people who were removed", but we don't know how they were removed or why, so we can't really tell you who should or should not have it.

As I was typing that, I had a thought - could the access removal have been done by one of your admins simply removing "application access" from a group?

In fact, it might be worth skipping the analysis and just asking your admins which one of them removed it all.

[gagan m s]

nick,

i am the only admin of the instance.

here is what i did which might have caused this.

i had to create some three thousand users , so i used the import project option create them in bulk. some users already had accounts.

so this might have caused the error?

[Nic Brough -Adaptavist-]

I can think of one way to do that.  Do you have two or more user directories?

[gagan m s]

no we have only one directory.

please go through the attached .

the one which doesnt have access is newly created using import project.

[Nic Brough -Adaptavist-]

Ok, but that looks right to me.  If a new user was created by the import, then the have not "had their access removed", they never had any in the first place.