#1256 Document the expectations about ghost users showing in the lookups
Closed: Fixed None Opened 7 years ago by dpal.

See ticket #1255 for the design of the new approach of dealing with fake/ghost users. There are some situations when fake/ghost users are removed from child groups but would still show up as a member of the parent group. It might look confusing and might cause some unnecessary bugs and tickets filed. To prevent this we need to clearly articulate how things would work with the new approach and what to expect.


It should also be made clear that this behavior will be only cosmetic. When the real user in question logs in (and thus an {{{initgroups()}}} call is made), these ghost entries will disappear. There should be no actual permission error, unless someone is relying on the list of users in a group for an access-control decision instead of asking whether a user is a member of that group (subtle, but important distinction).

description: See ticket #1255 for the design of the new approach of dealing with fake/ghost users. There are some situations when fake/ghost users are removed form child groups but would still show up as a member of the parent group. It might look confusing and might cause some unnecessary bugs and tickets filed. To prevent this we need to clearly articulate how things would work with the new approach and what to expect. => See ticket #1255 for the design of the new approach of dealing with fake/ghost users. There are some situations when fake/ghost users are removed from child groups but would still show up as a member of the parent group. It might look confusing and might cause some unnecessary bugs and tickets filed. To prevent this we need to clearly articulate how things would work with the new approach and what to expect.
type: enhancement => task

Fields changed

blockedby: => 1255

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.9 beta

This is related to ticket #1255 and should have the same owner.

owner: somebody => jzeleny

Fields changed

milestone: SSSD 1.9.0 beta 1 => SSSD 1.9.0 beta 2

FAQ updated: if there are no suggestions where else to place comments, I'm going to close this ticket.

https://fedorahosted.org/sssd/wiki/FAQ
(Why do some users appear as group members even if they are not?)

Fields changed

resolution: => fixed
status: new => closed

Metadata Update from @dpal:
- Issue assigned to jzeleny
- Issue marked as depending on: #1255
- Issue set to the milestone: SSSD 1.9.0 beta 2

2 years ago

Login to comment on this ticket.

Metadata