The list of users assigned to the User Group can not be displayed and throw a tomcat exception

• Type: Bug
• Status: Closed
• Resolution: No Longer Reproducible
• Affects Version/s: 7.0.0 M3
• Fix Version/s: 6.2.X EE, 7.0.0 Alpha 5
• Component/s: Core Infrastructure > Permissions
• Labels:
  • security-filter-bugs
• Story Points: 12
• Fix Priority: 3

Steps to reproduce:

1. Login as admin.
2. Go to Control Panel -> Roles.
3. Create a custom role named User Group Viewer.
4. Define Permissions on the new role.
Portal - General
Add - Go to Control Panel
Portal - Users and Organizations - User
Add - View
Portal - Users and Organizations - User Groups
Add - Assign Members
Add - View
Add - View Member
Control Panel:Portal - User Groups
Add - Access in Control Panel
Add - View
5. Add a User Group "Test User Group" with at least one user.
6. Create a new user and assign the User Group Viewer role to them.
7. Login as the new user.
8. Go to Control Panel -> User Groups.
9. Verify that the user can see the list of Users in the "Test User Group" .

Expected result:
The list of users assigned to the User Group should be displayed.

Actual result:
The list of users assigned to the User Group can not be displayed and throw a tomcat exception.