Non-administrator users are unable to add user to/remove user from user group

• Type: Bug
• Status: Closed
• Resolution: No Longer Reproducible
• Affects Version/s: 5.2.X EE, 6.0.12 EE, 6.1.0 CE RC1, 6.1.1 CE GA2, 6.2.0 CE M2
• Fix Version/s: 6.2.0 CE M4
• Component/s: Legacy, Legacy > Control Panel menu, Search Infrastructure > Framework, User Management, User Management > Roles
• Labels:
  • 6.0.6
  • community-verifier
• Environment: Tomcat 7.0 + MySQL 5. 6.1.x EE GIT ID: 3a243c58e6a0c77f4442673e00adcf58414085b9.; Tomcat 7.0 + MySQL 5. 6.2.x GIT ID: 2b6d3a246b1434b2dedc4304a58ca3731239fd24.
• Epic/Theme:
  • Platform
• Fix Priority: 3
• Similar Issues: Show 5 results ; ;

  LPS-15701	Non-administrator users and Regular user with permissions are unable to navigate to Control Panel.
  LPS-52634	ADT in Global not visible by non Administrators users
  LPS-53846	Unable to remove site membership from a user in User Details
  LPS-51778	User is unable to add pages to users and user groups
  LPS-25093	LDAP - unable to export user groups

I created a role that allows access to Add/Remove Users from User Groups (UserGroupPower.JPG)
I added the role to a newly created user called "Commander 1"
I created a user who has no roles/organizations/communities called "Peon 1".

When I try to add "Peon 1" to the User Group by "Commander 1" the user does not appear in the list of choices to add (Commander_View.JPG).
If I try the same thing but through an Administrator, like Bruno, all users appear (Bruno_View.JPG).

If I add any organization onto "Peon 1", the user is available to add by "Commander 1".
Why should I have to add an organization onto "Peon 1" to view him?

---------

Also if I add the role to an Organization and then add "Commander 1" to the Organization, instead of the role, only "Commander 1" appears in the list of people to add to any User Group (UserGroup_with_Organization.JPG).

It doesn't seem to make much sense to have the only people available to be chosen to the User Group by a sub-administrator to also have access to choose other people in the same organization. This makes the non-admins available to make changes also.

[Michael Haulussy]

I am also unable to define a role that can add users to a group in 5.2.8EE

[Flavel]

These issues are in a loop duplicating each other (LPS-15413 and LPS-16116). Which one is being worked on?

[Luyang Tan (Inactive)]

I can reproduce this issue on:
Tomcat 7.0 + MySQL 5. 6.1.x EE GIT ID: 3a243c58e6a0c77f4442673e00adcf58414085b9.
Tomcat 7.0 + MySQL 5. 6.2.x GIT ID: 2b6d3a246b1434b2dedc4304a58ca3731239fd24.

[Gaurav Jain]

Being part of community verifier program, I tried reproducing this issue against Liferay 6.2.0 CE M4 tomcat bundle/MySql 5.5.17.

But Can't reproduce issue.

I took following steps:

• Installed fresh LR tomcat bundle 6.2.0 CE M4
• Created a role "test-role", defined its permission and gave following permissions:

  Resource Set	Resource	Action	Scope
  ControlPanel:Portal>User Groups		Access in Control Panel	Portal
  ControlPanel:Portal>User Groups		View	Portal
  Portal>Users and Organizations	User	View	Portal
  Portal>Users and Organizations	User Group	Assign Members	Portal
  Portal>Users and Organizations	User Group	View	Portal

• Created a user "test-role-user" and associted it with "test-role"
• Created another user "normal-user" with no extra role, organization, site
• Create a user group "test-user-group"
• Logged-in with "test-role-user"; Control Panel > Portal > User groups > "test-user-group" > Assign Members
• "test-role-user" can see "normal-user" in Available section

It has likely been solved in a recent release and I recommend this can be closed.