It seems like role permissions are not applied or not working properly in project roles. If I go to 'Roles' in 'Project administration' and add existing LDAP groups to "Users" and "Developers" role, the permissions will not be fully applied.
My case: I assigned existing LDAP groups to "Users" and "Developers" roles, and the person from this group could see my tickets (the tickets in the project), but couldn't comment them or add a new one. He was able to change the status of the ticket (task). This is not the correct permission.
When I put the specific single user to "Users" and "Developers" roles, he was able to do comment and update tickets and create a new one. This is what it should be.
It seems like groups are somehow proceed not correctly.
So my question is: Does role permissions work after assigning a LDAP group to a project role?
Yes, they do work. JIRA doesn't care what directory a group comes from.
My best guess is that you've put the user in the right LDAP groups, but the directory has not yet been synchronised, so JIRA does not yet know that they are in the group. Using JIRA's internal group browser, see if you can see the users in there. And maybe go to user directories -> ldap -> synchronise (or just leave it a while - most systems will sync at least hourly)
I don't know, because you have not told us what "using LDAP authentication" means.
Are you using LDAP for just authentication? (the missing option to synchronise implies that you are). OR, are you using it as a full directory, with users and groups?
It might be easier for you to take a screenshot of Admin -> User directories and show us the full list of directories you have set up. That would clarify it better than my words
Ok, great, that is exactly what I thought.
Your LDAP directory is only being used for authentication. It gives JIRA a list of valid users, and when they try to log in, it checks their password against their LDAP one.
It does NOT provide groups or group memberships to JIRA, it's just authentication. It's irrelevant what LDAP groups a user is in, as those groups have nothing to do with JIRA.
Hey Atlassian Community! Today we are launching a bunch of customer stories about the amazing work teams, like Dropbox and Twilio, are doing with Jira. You can check out the stories here. The thi...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG