Group project templates cannot be seen by inherited members with roles lower than Developer
Summary
When users try to create a project from a custom group level project template, the project template is not visible to inherited members with roles lower than Developer
.
Steps to reproduce
- Setup the custom group-level project template in subgroup
A
under the top level group - Add members to the top level group with
Reporter
permission - Create a new subgroup
B
under the top level group for new projects - Escalate permission for members in subgroup
B
toDeveloper
/Maintainer
- Try to create a new project in subgroup
B
from the custom project template and see that the group template is not showing up
Variation:
- Escalate the member permission to
Maintainer
in subgroupB
and add subgroupB
as a member withMaintainer
permission in the subgroupA
also doesn't work
Example Project
What is the current bug behavior?
Inherited members cannot see the group project template unless they are:
- added directly to the project template group one by one with a role of
Developer
or higher. - added to the top level group with a role of
Developer
or higher, in which case inheritance works.
What is the expected correct behavior?
Members who have access to the group, should be able to create a new project using the templates.
Relevant logs and/or screenshots
Output of checks
Results of GitLab environment info
Expand for output related to GitLab environment info
(For installations with omnibus-gitlab package run and paste the output of: `sudo gitlab-rake gitlab:env:info`) (For installations from source run and paste the output of: `sudo -u git -H bundle exec rake gitlab:env:info RAILS_ENV=production`)
Results of GitLab application Check
Expand for output related to the GitLab application check
(For installations with omnibus-gitlab package run and paste the output of:
sudo gitlab-rake gitlab:check SANITIZE=true
)(For installations from source run and paste the output of:
sudo -u git -H bundle exec rake gitlab:check RAILS_ENV=production SANITIZE=true
)(we will only investigate if the tests are passing)
Possible fixes
Customers
customer | contact |
---|---|
https://gitlab.zendesk.com/agent/tickets/514766 | @lalabi |