Invited groups cannot see newly created projects
Summary
Reported by a customer in ZD (internal use only)
If a group containing users Alpha
is invited to another group Bravo
, the users in the Alpha
group can see existing projects within the Bravo
group, but any new projects created within the Bravo
group after the group was invited aren't visible/accessible to the Alpha
users.
Steps to reproduce
-
Create the following:
Group: Alpha - User: user1 Group: Bravo - Project: testproject1
-
Edit the
Bravo
group's members and invite theAlpha
group as a reporter. -
Add a
testproject2
project to theBravo
group. -
Impersonate the
user1
user.- Observe that
user1
can see thebravo/testproject1
project (created before the group invite) - Observe that
user1
cannot see thebravo/testproject2
project (created after the group invite
- Observe that
Workaround
- Toggle the permissions on the
Alpha
group (change from reporter to guest, and then back), and thenuser1
can now see thebravo/testproject2
project.
Example Project
N/A
What is the current bug behavior?
When a new project is added to a group, any other groups that have permission to view it don't automatically gain access.
What is the expected correct behavior?
Groups which are members of other groups should be able to see newly created projects automatically without having to implement the identified workaround.
Relevant logs and/or screenshots
N/A
Output of checks
Using GitLab 12.10.1-ee
Possible fixes
Unknown