Masters can't override LDAP group synced members permissions anymore with 9.x

Summary

Masters can't override LDAP group synced members permissions anymore with 9.x.

See: https://gitlab.com/gitlab-org/gitlab-ee/issues/343 and https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/822

Steps to reproduce

  1. Have LDAP group sync enabled.
  2. Try to override LDAP group synced member's permissions by using a user account which has master role assigned to that particular group.

What is the current bug behavior?

Master can't override the member's permission, owner and admin can. With 8.17 the master were able to.

What is the expected correct behavior?

Masters should also be able to override the permissions.

Results of GitLab environment info

Expand for output related to GitLab environment info
System information
System:		Ubuntu 14.04
Proxy:		no
Current User:	git
Using RVM:	no
Ruby Version:	2.3.3p222
Gem Version:	2.6.6
Bundler Version:1.13.7
Rake Version:	10.5.0
Redis Version:	3.2.5
Git Version:	2.13.0
Sidekiq Version:5.0.0
Go Version:	unknown

GitLab information Version: 9.3.0-ee Revision: 7523f02 Directory: /opt/gitlab/embedded/service/gitlab-rails DB Adapter: postgresql DB Version: 9.6.3 URL: https://secret HTTP Clone URL: https://secret/some-group/some-project.git SSH Clone URL: git@secret:some-group/some-project.git Elasticsearch: yes Geo: no Using LDAP: yes Using Omniauth: no

GitLab Shell Version: 5.0.5 Repository storage paths:

  • default: /mnt/gitdata/git-data/repositories Hooks: /opt/gitlab/embedded/service/gitlab-shell/hooks Git: /opt/gitlab/embedded/bin/git

Results of GitLab application Check

This fails currently due: https://gitlab.com/gitlab-org/gitlab-ee/issues/2757

ZD: https://support.gitlab.com/hc/en-us/requests/79345

Assignee Loading
Time tracking Loading