Jira allows internal user to be added to AD groups

Rilwan Ahmed

Found this in Jira 7.11 and 8.2.1 versions

1. Go to User Management
2. Search any group synced from Active directory
3. Add any internal user to that group

Expected result: You should not be able to add internal user to the group
Error message to be displayed "You cannot add user 'XXXXX' to group 'xxxxxxxxx'. The user's directory is read only".

Actual result: You can add user to group from AD in jira.

Also when you try to add AD synced users to group, we get "You cannot add user 'XXXXX' to group 'xxxxxxxxx'. The user's directory is read only".