Skip to content

Provide the ability to change the max role permissions of user who is an inherited member of a project from a parent group

Problem

Consider the following GitLab Project configuration: Group A -> Project B -> John (inherited group member).

As John is an inherited member of Project B it is not possible to change his max role permission even as project owner via the GitLab GUI or via the API. If you try to change the role permission via an API call, such as:

curl --request PUT --header "PRIVATE-TOKEN: xxxxxxxxxx "https://gitlab.com/api/v4/projects/31567703/members/8182903?access_level=40" it will return the error {"message":"404 Not found"}

However, if we have the following configuration: Group A -> Project B -> John (Added Project Member).

It is possible to change the max role permission both via the GitLab GUI and also via the API.

Please view the attached PDF file which demonstrates this in greater detail: Changes_to_roles_inherited_from_groups.pdf

Proposal

  1. Allow a project "owner" to change the role permissions of an inherited user

if the above is not possible

  1. Return a more meaningful API response message informing that this is not possible for whatever reason rather than a 404 error.