Wrong Max Role for Members Invited through Group Invitation

Summary

The list of members under a group or a project reports wrong access level for users that are invited at top-level and as members of an invited group.

Side note: There is also an API aspect to this problem: #389052 (closed) (or a common underlying one)

Steps to reproduce

  1. Invite user1 to <group> as guest
  2. Create a group: <group>/RBAC/sports/gitlab-sports-maintainer and invite user1 as maintainer
  3. Create a group <group>/sports
  4. Invite <group>/RBAC/sports/gitlab-sports-maintainer group to <group>/sports with max role - maintainer.

=> The list of members under <group>/sports keeps reporting that user1 still has guest access while his actual access level is maintainer.

Example Project

https://gitlab.com/groups/gitlab-gold/kategrechishkinatestgroup/rbac/sports/gitlab-sports-maintainer/-/group_members?search=ekaterina https://gitlab.com/groups/gitlab-gold/kategrechishkinatestgroup/sports/-/group_members?search=ekaterina

What is the current bug behavior?

user1's Max role under <group>/sports Members list report guest when they actually have maintainer access (they can perform maintainer's actions, like creating projects in the group).

What is the expected correct behavior?

user1's Max role under <group>/sports Members list should report maintainer.

Relevant logs and/or screenshots

226120-permissions-under-invited-group

226120-wrong-guest-role

226120-ekaterina-cancreate-projects

Output of checks

This bug happens on GitLab.com

Edited Feb 07, 2023 by Katrin Leinweber
Assignee Loading
Time tracking Loading