Spike: Groups invited to some group have no access to subgroups
Summary
Inviting a group using "Invite group" to another group members, doesn't give access to that group of members in the subgroups of the parent group.
Parent group members: owner + GroupA (invited using group invite) Parent group subgroups(projects): No access for GroupA members, error 404 when trying to access if private.
This is related to issue #18328 (closed).
Steps to reproduce
- Create a group of users and add some users.
- Create another group and add a subgroup
- Add group of users using invite group in the last group created
- Find out that users from the group of users don't have access to subgroups of the group they were invited to.
Example Project
I'm not able to create an example projects without some users to test, only have this one right now. Following steps to reproduce it is pretty straight forward.
What is the current bug behavior?
Users of a group invited by "Invite group" have no access to subgroups projects.
What is the expected correct behavior?
Users of a group invited by "Invite group" have access to subgroups projects, with same level of priviledge specified in the invite.
Relevant logs and/or screenshots
Don't have a specific log/screenshot.
Output of checks
This bug happens on GitLab.com
Possible fixes
Propagate membership and permission of groups invited by "Invite group" to all subgroups. Not sure where this is implemented, sorry.