When we had problems with groups not being visible (i.e. not being available for assigning to restricted pages) I investigated the issue and found out that the active flag is not synchronized from crowd to confluence.
How to reproduce:
- crowd: uncheck the active flag of an arbitrary group XY
- confluence: manually trigger sync in confluence administration -> user directories
- verify results
- the group XY should no longer be available (for assigning to restricted pages) as it is marked "inactive"
- alternatively check the active flag in the confluence database table "cwd_group
The problem is that the group is still active in the database table (column "active" still contains 'T') and it is still available for assignment to restricted pages.
Thanks
Frank