Non-administrator users are unable to add user to/remove user from user group

• Type: Bug
• Status: Closed
• Resolution: No Longer Reproducible
• Affects Version/s: 5.2.X EE, 6.0.12 EE, 6.1.0 CE RC1, 6.1.1 CE GA2, 6.2.0 CE M2
• Fix Version/s: 6.2.0 CE M4
• Component/s: Administration UI, Administration UI > Users, Administration UI > Users > Roles, Legacy, Legacy > Control Panel menu, Portal Services > Search > Framework
• Labels:
  • 6.0.6
  • community-verifier
• Environment: Tomcat 7.0 + MySQL 5. 6.1.x EE GIT ID: 3a243c58e6a0c77f4442673e00adcf58414085b9. ; Tomcat 7.0 + MySQL 5. 6.2.x GIT ID: 2b6d3a246b1434b2dedc4304a58ca3731239fd24.
• Epic/Theme:
  • Platform
• Fix Priority: 3
• Similar Issues: Show 4 results ; ;

  LPS-15701	Non-administrator users and Regular user with permissions are unable to navigate to Control Panel.
  LPS-25093	LDAP - unable to export user groups
  LPS-39419	Unable to add pages to user groups
  LPS-32808	Check membership policies everytime the user is added or removed from a user group

I created a role that allows access to Add/Remove Users from User Groups (UserGroupPower.JPG)
I added the role to a newly created user called "Commander 1"
I created a user who has no roles/organizations/communities called "Peon 1".

When I try to add "Peon 1" to the User Group by "Commander 1" the user does not appear in the list of choices to add (Commander_View.JPG).
If I try the same thing but through an Administrator, like Bruno, all users appear (Bruno_View.JPG).

If I add any organization onto "Peon 1", the user is available to add by "Commander 1".
Why should I have to add an organization onto "Peon 1" to view him?

---------

Also if I add the role to an Organization and then add "Commander 1" to the Organization, instead of the role, only "Commander 1" appears in the list of people to add to any User Group (UserGroup_with_Organization.JPG).

It doesn't seem to make much sense to have the only people available to be chosen to the User Group by a sub-administrator to also have access to choose other people in the same organization. This makes the non-admins available to make changes also.

[Michael Haulussy]

I am also unable to define a role that can add users to a group in 5.2.8EE

[Flavel]

These issues are in a loop duplicating each other (LPS-15413 and LPS-16116). Which one is being worked on?

[Luyang Tan]

I can reproduce this issue on:
Tomcat 7.0 + MySQL 5. 6.1.x EE GIT ID: 3a243c58e6a0c77f4442673e00adcf58414085b9.
Tomcat 7.0 + MySQL 5. 6.2.x GIT ID: 2b6d3a246b1434b2dedc4304a58ca3731239fd24.

[Gaurav Jain]

Being part of community verifier program, I tried reproducing this issue against Liferay 6.2.0 CE M4 tomcat bundle/MySql 5.5.17.

But Can't reproduce issue.

I took following steps:

• Installed fresh LR tomcat bundle 6.2.0 CE M4
• Created a role "test-role", defined its permission and gave following permissions:

  Resource Set	Resource	Action	Scope
  ControlPanel:Portal>User Groups		Access in Control Panel	Portal
  ControlPanel:Portal>User Groups		View	Portal
  Portal>Users and Organizations	User	View	Portal
  Portal>Users and Organizations	User Group	Assign Members	Portal
  Portal>Users and Organizations	User Group	View	Portal

• Created a user "test-role-user" and associted it with "test-role"
• Created another user "normal-user" with no extra role, organization, site
• Create a user group "test-user-group"
• Logged-in with "test-role-user"; Control Panel > Portal > User groups > "test-user-group" > Assign Members
• "test-role-user" can see "normal-user" in Available section

It has likely been solved in a recent release and I recommend this can be closed.