There are 8 updates, 1 comment.
 
 
XWiki Platform / cid:jira-generated-image-avatar-20290c9a-bc19-4fc1-8e88-bfff580774d9 XWIKI-24610 Closed

User picker in group editor is listing disabled user

 
View issue   ยท   Add comment
 

8 updates

 
cid:jira-generated-image-avatar-a6454a6a-a69e-42c6-9ab2-3dfd2fe64db0 Changes by Marius Dumitru Florea on 01/Oct/26 14:20
 
Fix Version: 17.10.14
Fix Version: 18.9.0-rc-1
Fix Version: 18.4.7
Documentation in Release Notes: N/A
Documentation: N/A
Resolution: Fixed
Tests: Integration
Status: Open Closed
 
 

1 comment

 
cid:jira-generated-image-avatar-a6454a6a-a69e-42c6-9ab2-3dfd2fe64db0 Marius Dumitru Florea on 01/Oct/26 14:19
 

Root cause

The group editor adds members using the standard user picker (#userPicker), which fetches its suggestions from the uorgsuggest.vm template. The XWQL query used by this template to search users didn't filter on the active property of XWiki.XWikiUsers, so disabled users were suggested. XWIKI-18766 fixed the same problem only for the "List of users" property displayer, which uses a different query (DefaultUsersQueryBuilder). Note that this affected all the user pickers (group editor, rights editor, Share Page, wiki owner / members, etc.), not only the group editor.

Fix

  • uorgsuggest.vm now suggests only enabled users (user.active = 1), unless the includeInactiveUsers=true request parameter is passed. Loading the current selection is not affected, so a disabled user that is already selected (e.g. an existing group member) is still displayed properly.
  • The user picker (JavaScript) has a new includeInactiveUsers setting, which defaults to the value of the data-include-inactive-users attribute, for the cases where disabled users should be suggested.
  • The Live Data user filter (e.g. on the last author column) keeps suggesting disabled users, since documents may have been authored by users that were disabled later.
  • Added a functional test checking that the group editor doesn't suggest disabled users.

Commits: