Users are unable to update their Confluence profile information

Question

Hi there, I'm currently facing the following issue: Confluence is getting its user base from Jira which is linked to an Active-Directory-Server. Users and groups are synchronised without problems. However, users are unable to update their profiles regarding phone, im, company details etc. The logs read as follows: -- referer: http://baseURL/confluence/users/editmyprofile.action | url: /confluence/users/doeditmyprofile.action | traceId: 771dde954419d38b | userName: user | action: doeditmyprofile ->[null]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT (Session #528037527) 2018-06-26 14:42:56,478 WARN [http-nio-8090-exec-94] [confluence.impl.hibernate.ConfluenceHibernateTransactionManager] doRollback Performing rollback. Transactions: ... 413 more at com.atlassian.crowd.embedded.core.CrowdServiceImpl.updateUser(CrowdServiceImpl.java:363) at com.atlassian.crowd.manager.application.ApplicationServiceGeneric.updateUser(ApplicationServiceGeneric.java:718) at com.atlassian.crowd.manager.directory.DirectoryManagerGeneric.updateUser(DirectoryManagerGeneric.java:399) at com.atlassian.crowd.directory.DbCachingRemoteDirectory.updateUser(DbCachingRemoteDirectory.java:617) at com.atlassian.crowd.directory.RemoteCrowdDirectory.updateUser(RemoteCrowdDirectory.java:265) at com.atlassian.crowd.integration.rest.service.RestCrowdClient.updateUser(RestCrowdClient.java:223) at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecutor.andCheckResponse(RestExecutor.java:537) at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecutor.throwError(RestExecutor.java:614) Caused by: com.atlassian.crowd.exception.ApplicationPermissionException: APPLICATION_PERMISSION_DENIEDCannot update user 'user' because directory 'Active-Directory-Server' does not allow updates. at java.lang.Thread.run(Thread.java:748) Usually, Confluence should only update those pieces of information within its own table OS_PROPERTYENTRY. Any ideas, why Confluence is trying to update the user within the Active-Directory-Server? Cheers, Thorsten

Paul Baumann · Answer

We need the read/write setting in User Directory Synch with Jira because of automatic handling of the application access group (licences).

A workaround for this, so that users are able to modify their confluence profile while User Directory is set to read/write would be appreciated.

best regards

Paul

Daniel Eads · Answer

Hi Thorsten,

Is the Jira directory (in Confluence) set up for Read/Write?

From your log, it looks to me like it is trying to call Jira to make those changes. Then Jira in turn is trying to modify those properties in Active Directory, which it doesn't appear to have permissions to do.

Try with the Jira User Directory in Confluence set to Read Only and let me know how it goes.

Cheers,
Daniel