Display of group-specific permissions for members that are added multiple times
Problem
When a user has a group-specific role and also inherited membership from a parent group, the user will appear twice in Members (once under their inherited membership role, and once under their specific role). This happens in projects as well.
We recently had an issue where a user had elevated rights to a group, but only Developer
access to a project within the group. When you viewed the Members
list within the project, it showed the user as a Developer
. However because that user had elevated rights to the parent group, the user actually had Owner
rights. This is very misleading and confusing.
Proposal
- Iteration: Display an entry on the Members page for each source that a member has gained access to the group or project from. This means that if a member has both inherited and direct access to a group or project, the member will be listed twice.
- Iteration: Improve the UX of the Members page to combine entries for one member into one line. When a member has been added via multiple sources, users have the option to expand the sources field to see all sources and related permissions. By default, the source giving the member the highest permission is shown. See #426964.
Edited by Christina Lohr