2019-09-02 - Triage report for "group::access"

Hi, @jeremy @dennis @lmcandrew

This is a group or stage level triage package that aims to summarize the feature proposals and bugs which have not been scheduled or triaged. For more information please refer to the handbook:

  • https://about.gitlab.com/handbook/engineering/quality/triage-operations/index.html#triage-packages

Scheduling the workload is a collaborative effort by the Product Managers and Engineering Managers for that group. Please work together to provide a best estimate on priority and milestone assignments. For each issue please:

  • Determine if the issue should be closed if it is no longer relevant or a duplicate.
  • If it is still relevant please assign either a best estimate versioned milestone, the %Backlog or the %Awaiting further demand milestone.
  • Specifically for ~bug, if there is no priority or clarity on a versioned milestone, please add a Priority label. Priority labels have an estimate SLO attached to them and help team members and the wider community understand roughly when it will be considered to be scheduled.
    • https://gitlab.com/gitlab-org/gitlab-ce/blob/master/doc/development/contributing/issue_workflow.md#priority-labels
  • Once a milestone has been assigned please check off the box for that issue.
  • Please work with your team to complete the list by the due date set.

Feature Proposal Section

For the following feature proposals. Please either close or assign either a versioned milestone, the %Backlog or the %Awaiting further demand milestone.

Unscheduled feature with customer

  • #13705 Add a tooltip to the SSO Enforcement toggle switch ~"GitLab Enterprise Edition", GitLab.com Priority, UX, customer, devopsmanage, ~"enhancement", feature, gitlab.com, ~"group::access", internal customer, saml
  • #13679 (closed) Add GET endpoint to LDAP group link API api, customer, devopsmanage, feature, ~"group::access", ~"groups", ldap
  • #12975 (closed) The field "Enter new password" in Service Templates pages should show asterisks in the password field ~"GitLab Enterprise Edition", Manage [DEPRECATED], UX, customer, devopsmanage, feature, frontend, ~"group::access", settings
  • #12252 (closed) Change Role of User in Project or Group does not send System hook ~"Accepting merge requests", ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P4", ~"S4", customer, devopsmanage, feature, ~"group::access", security
  • #12251 Add GitLab into the Azure Active Directory application gallery for wider SSO support ~"GitLab Enterprise Edition", Manage [DEPRECATED], authentication, customer, devopsmanage, ~"enhancement", feature, gitlab.com, ~"group::access", saml, scim
  • #12153 (closed) ForgeRock Identity Provider - for SAML/SCIM SSO-enabled group management ~"GitLab Enterprise Edition", Manage [DEPRECATED], authentication, customer, devopsmanage, ~"enhancement", feature, gitlab.com, ~"group::access", saml, scim
  • #11500 Add reCaptcha to "Forgot Password" and "LDAP Login" Page ~"GitLab Enterprise Edition", Manage [DEPRECATED], customer, devopsmanage, feature, ~"group::access", spam fighting
  • #9639 Make label for the Kerberos login button customizable ~"GitLab Enterprise Edition", Manage [DEPRECATED], authentication, customer, devopsmanage, feature, ~"group::access", kerberos
  • #8931 Cache LDAP group sync by filter queries ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P3", ~"S3", customer, devopsmanage, feature, ~"group::access", ldap
  • #8049 (closed) Show Deploy Key title field in audit log instead of username ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"audit events", customer, customer+, devopsmanage, feature, ~"group::access"
  • #7606 Identify internal users by LDAP groups ~"GitLab Enterprise Edition", Manage [DEPRECATED], customer, devopsmanage, feature, ~"group::access", ldap
  • #6054 Introduce additional connection logic to LDAP so groups don't lose membership unnecessarily ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"Platform [DEPRECATED]", customer, devopsmanage, feature, ~"group::access", ldap
  • #5569 (closed) Groups API: Add Allowed to create Projects ~"GitLab Enterprise Edition", Manage [DEPRECATED], api, customer, devopsmanage, feature, ~"group::access", ~"groups", settings
  • #5553 LDAP re-query DNS ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"Platform [DEPRECATED]", backend, customer, customer+, devopsmanage, feature, ~"group::access", ldap
  • #5552 (closed) LDAP connection pooling ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"Platform [DEPRECATED]", backend, customer, customer+, devopsmanage, feature, ~"group::access", ldap

Unscheduled feature (non-customer)

  • #13551 (closed) Read-only acces token to the GitLab API api, authorization, devopsmanage, feature, ~"group::access"
  • #13373 (closed) Temp Owners can remove expiration date ~"GitLab Enterprise Edition", devopsmanage, feature, ~"group::access", subgroups
  • #13138 (closed) Basic SCIM filtering: support 'eq' filter and support requests without a filter ~"GitLab Enterprise Edition", Manage [DEPRECATED], backend, devopsmanage, feature, ~"group::access", scim
  • #13077 (closed) Gitlab AWS Authentication Solution ~"GitLab Enterprise Edition", authentication, devopsmanage, ~"enhancement", feature, ~"group::access"
  • #12704 (closed) Notification to User and Project/Group Maintainers When Access Expires ~"GitLab Enterprise Edition", devopsmanage, feature, ~"group::access", internal customer, security
  • #12680 (closed) Add ability to specify "group_filter" to LDAP provider. ~"GitLab Enterprise Edition", Manage [DEPRECATED], devopsmanage, feature, ~"group::access", ldap
  • #12304 Avoid double 2FA when Group SAML has appropriate AuthnContextClassRef ~"GitLab Enterprise Edition", Manage [DEPRECATED], devopsmanage, feature, gitlab.com, ~"group::access", saml
  • #12120 Identity API for updating Omniauth/SAML/LDAP identity links ~"GitLab Enterprise Edition", Manage [DEPRECATED], api, backend, devopsmanage, feature, ~"group::access", saml
  • #12089 (closed) Enhanced non-guest license control ~"GitLab Enterprise Edition", Manage [DEPRECATED], devopsmanage, feature, ~"group::access", permissions
  • #11916 LDAP group sync notification messages ~"GitLab Enterprise Edition", Manage [DEPRECATED], devopsmanage, feature, ~"group::access", ldap
  • #11854 Allow Group SAML sign in from main sign in page ~"GitLab Enterprise Edition", Manage [DEPRECATED], UX, devopsmanage, feature, gitlab.com, ~"group::access", saml
  • #11605 Group SAML redirect should store requested location ~"GitLab Enterprise Edition", Manage [DEPRECATED], UX, backend, devopsmanage, feature, ~"group::access", saml
  • #11233 (closed) Group based object storage ~"GitLab Enterprise Edition", Object Storage, devopsmanage, feature, ~"group::access", ~"groups"
  • #10900 Use a real email attribute on SCIM endpoints ~"Accepting merge requests", ~"GitLab Enterprise Edition", Manage [DEPRECATED], authentication, backend, devopsmanage, feature, gitlab.com, ~"group::access", saml
  • #8540 (closed) Capture instance configuration changes as an audit event ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"audit events", backend, devopsmanage, feature, ~"group::access"

Bug Section

For the following bugs. Please either close or assign either a versioned milestone, the %Backlog or the %Awaiting further demand milestone and ensure that a priority label is set.

Heatmap for all bugs

Bugs for their priority and severity label are counted here. Every bug should have severity and priority labels applied. Please take a look at the bugs which fall into the columns indicating that the priority or severity labels are currently missing.

~S1 ~S2 ~S3 ~S4 ~"No severity"
~P1 0 0 0 0 0
~P2 0 0 2 0 0
~P3 0 2 16 2 0
~P4 0 0 19 2 0
~"No priority" 0 3 6 5 22

Unscheduled frontend ~bug (non-customer)

  • #13011 (closed) Typo in Gitlab tutorial, Merge Requests ~"GitLab Enterprise Edition", Manage [DEPRECATED], UX, ~"bug", devopsmanage, frontend, ~"group::access"
  • #12640 (closed) Externalized string using namespaces in new user form in admin area is missing required prefix ~"GitLab Enterprise Edition", Manage [DEPRECATED], UI polish, ~"bug", devopsmanage, frontend, ~"group::access"
  • #9196 (closed) License button is misaligned ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P4", ~"S4", admin dashboard, ~"bug", devopsmanage, frontend, ~"group::access"
  • #5623 (closed) LDAP user filter not being displayed in full on admin setting and members UI pages ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P4", ~"S4", ~"bug", customer+, devopsmanage, frontend, ~"group::access", ldap
  • #3315 (closed) Admin: "Send Message" button clickable before selecting recipient ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P4", ~"S3", admin dashboard, ~"bug", default-priority, default-severity, devopsmanage, frontend, ~"group::access", ~"user management"

Unscheduled ~bug with customer

  • #12856 Membership requests are taken into account for access level validation ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"S3", ~"bug", customer, devopsmanage, ~"group::access", ldap
  • #12178 (closed) Omniauth 500 when blocking new users ~"GitLab Enterprise Edition", Manage [DEPRECATED], authentication, ~"bug", customer, devopsmanage, ~"group::access", oauth, saml
  • #11444 Users with developer access cannot access custom group-level project templates ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"bug", customer, devopsmanage, ~"group::access"
  • #11285 (closed) SSO failure sign-in with U2F Yubikey 2FA, ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"bug", customer, devopsmanage, ~"group::access"
  • #8319 (closed) Group Member Lock is accessible to group members with maintainer role ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"bug", customer, devopsmanage, ~"group::access", ~"groups", permissions
  • #5804 (closed) LDAP bind_dn without password breaks GroupSync ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P3", ~"Platform [DEPRECATED]", ~"S3", ~"bug", customer, devopsmanage, ~"group::access", ldap
  • #5793 Updating user email doesn't work when user synced attributes exist ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"S3", authentication, ~"bug", customer, devopsmanage, ~"group::access", ldap
  • #4818 (closed) Only connect to LDAP server if group links exist for that provider ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P3", ~"Platform [DEPRECATED]", ~"S3", ~"bug", customer, default-priority, default-severity, devopsmanage, ~"group::access", ldap
  • #4436 A Kerberos user may have multiple identities from the same provider ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P3", ~"S3", authentication, backend, ~"bug", customer, default-priority, default-severity, devopsmanage, ~"group::access", kerberos
  • #3423 (closed) New users from LDAP fail with undefined method each_with_index ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P3", ~"Platform [DEPRECATED]", ~"S3", backend, ~"bug", customer, default-priority, default-severity, devopsmanage, ~"group::access", ldap
  • #1383 (closed) LDAP ssh key sync sends email notifications ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P4", ~"S3", ~"bug", customer, default-priority, default-severity, devopsmanage, ~"group::access", ldap
  • #823 (closed) Owner Adding LDAP Group Links for 'admin' group can Result in 404 ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P4", ~"S3", ~"bug", customer, default-priority, default-severity, devopsmanage, ~"group::access", ldap
  • #802 (closed) LDAP group option should not be displayed if group_base is blank ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P4", ~"S3", ~"bug", customer, default-priority, default-severity, devopsmanage, ~"group::access", ldap
  • #662 (closed) Users with multiple LDAP identities do not sync correctly ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"P4", ~"S3", ~"bug", customer, default-priority, default-severity, devopsmanage, ~"group::access", ldap

Unscheduled ~bug (non-customer)

  • #13853 (closed) Archiving a project removes all branches except develop and master ~"S4", ~"bug", devopsmanage, ~"group::access", repository
  • #13522 (closed) Using SCIM to add a user two separate Groups on gitlab.com fails Manage [DEPRECATED], authorization, backend, ~"bug", devopsmanage, ~"group::access", scim
  • #13502 (closed) Regex escapes "" inconsistently respected PUT to /projects/:id/push_rule api, ~"bug", devopsmanage, ~"group::access", settings
  • #13487 (closed) Developper who created a projet not automatically set as maintainer ~"S4", ~"bug", devopsmanage, ~"group::access"
  • #13440 (closed) When a group have LDAP synchronization it allows users to be added through API which cannot be deleted through API or in UI ~"GitLab Enterprise Edition", ~"S2", api, ~"bug", devopsmanage, ~"group::access", ldap
  • #13213 (closed) Impersonation tokens are not bound to the creator of the token ~"GitLab Enterprise Edition", ~"bug", devopsmanage, ~"group::access"
  • #13169 (closed) Service Templates should not be visible/available when the corresponding project settings are not available ~"Accepting merge requests", ~"GitLab Enterprise Edition", ~"bug", devopsmanage, group templates, ~"group::access"
  • #13024 (closed) ActiveDirectory Group Inheritance moving intermediate group cause losing access ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"S3", ~"bug", devopsmanage, ~"group::access", ldap
  • #12847 (closed) GitLab enterprise without license ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"S3", ~"Support", ~"bug", devopsmanage, ~"group::access"
  • #12603 (closed) 500 error on /admin/audit_events on GitLab.com ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"audit events", ~"bug", devopsmanage, ~"group::access", internal customer, ~"performance"
  • #12559 (closed) Cannot enable 2FA as Ip restriction range can't be blank ~"GitLab Enterprise Edition", Manage [DEPRECATED], admin dashboard, ~"bug", devopsmanage, ~"group::access"
  • #12494 (closed) backup / restore in gitlab-12.0.1-ee is intermittently failing to create valid single tar backup that can be restored ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"S3", ~"backup-restore", ~"bug", devopsmanage, ~"group::access"
  • #12462 (closed) auto_link_ldap_user (and therefore login) fails if no email attribute is set on the LDAP object ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"S3", ~"bug", devopsmanage, ~"group::access", ldap, saml
  • #12305 (closed) Create project from custom template failed with "undefined method `start_with?' for nil:NilClass" ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"bug", custom templates, devopsmanage, ~"group::access", needs investigation
  • #11911 (closed) Approval data can not be loaded in MR when having the root domain dot in the URL ~"GitLab Enterprise Edition", Manage [DEPRECATED], ~"S4", ~"bug", devopsmanage, ~"group::access"

Heatmap for ~missed-SLO bugs

~S1 ~S2 ~S3 ~S4
~P1 0 0 0 0
~P2 0 0 1 0
~P3 0 0 0 0
~P4 0 0 0 0


This is a group level triage package that aims to collate the latest bug reports (for frontend and otherwise) and feature proposals. For more information please refer to the handbook:

  • https://about.gitlab.com/handbook/engineering/quality/triage-operations/index.html#triage-packages
Assignee Loading
Time tracking Loading