Gitlab 12 has a link to 'Leave' Group. This should not be the default and configurable per Instance/Group.
<!--IssueSummary start--> <details> <summary> Everyone can contribute. [Help move this issue forward](https://handbook.gitlab.com/handbook/marketing/developer-relations/contributor-success/community-contributors-workflows/#contributor-links) while earning points, leveling up and collecting rewards. </summary> - [Close this issue](https://contributors.gitlab.com/manage-issue?action=close&projectId=278964&issueIid=32916) </details> <!--IssueSummary end--> <!--- Please read this! Before opening a new issue, make sure to search for keywords in the issues filtered by the "regression" or "bug" label: - https://gitlab.com/gitlab-org/gitlab/issues?label_name%5B%5D=regression - https://gitlab.com/gitlab-org/gitlab/issues?label_name%5B%5D=bug and verify the issue you're about to submit isn't a duplicate. ---> ### Summary Gitlab 12 has a link to 'Leave' Group. This should not be the default and be configurable per Instance/Group. In our corporate environment, we manage Gitlab Group membership via LDAP Groups. If a team member wants to leave a group, they need to follow the approval process to remove an LDAP Group from their profile. Gitlab 11 did not have this Link. ### Steps to reproduce Install Gitlab 12.x ### Example Project n/a ### What is the current *bug* behavior? User access is temporarily disabled until the LDAP Sync restores access. ### What is the expected *correct* behavior? No options to 'Leave Group' from Gitlab (like we have in versions prior to Gitlab 12) ### Relevant logs and/or screenshots See Attached![gitlab-12-leave-group-link](/uploads/e996ffb47fafa4c499d64e3634aa3844/gitlab-12-leave-group-link.png) ### Output of checks n/a #### Results of GitLab environment info <details> <summary>Expand for output related to GitLab environment info</summary> <pre> ~ 50 # gitlab-rake gitlab:env:info System information System: Proxy: no Current User: git Using RVM: no Ruby Version: 2.6.3p62 Gem Version: 2.7.9 Bundler Version:1.17.3 Rake Version: 12.3.2 Redis Version: 3.2.12 Git Version: 2.22.0 Sidekiq Version:5.2.7 Go Version: unknown GitLab information Version: 12.2.5-ee Revision: e817f2e2864 Directory: /opt/gitlab/embedded/service/gitlab-rails DB Adapter: PostgreSQL DB Version: 10.9 URL: https://XXXXX HTTP Clone URL: https://XXXXX SSH Clone URL: ssh:/XXXXX Elasticsearch: no Geo: no Using LDAP: yes Using Omniauth: yes Omniauth Providers: GitLab Shell Version: 9.3.0 Repository storage paths: - default: /var/opt/gitlab/git-data/repositories GitLab Shell path: /opt/gitlab/embedded/service/gitlab-shell Git: /opt/gitlab/embedded/bin/git </pre> </details> #### Results of GitLab application Check 51 # gitlab-rake gitlab:check SANITIZE=true Checking GitLab subtasks ... Checking GitLab Shell ... GitLab Shell: ... GitLab Shell version >= 9.3.0 ? ... OK (9.3.0) Running /opt/gitlab/embedded/service/gitlab-shell/bin/check Check GitLab API access: OK Redis available via internal API: OK Access to /var/opt/gitlab/.ssh/authorized_keys: OK gitlab-shell self-check successful Checking GitLab Shell ... Finished Checking Gitaly ... Gitaly: ... default ... OK Checking Gitaly ... Finished Checking Sidekiq ... Sidekiq: ... Running? ... yes Number of Sidekiq processes ... 1 Checking Sidekiq ... Finished Checking Incoming Email ... Incoming Email: ... Reply by email is disabled in config/gitlab.yml Checking Incoming Email ... Finished Checking LDAP ... LDAP: ... Server: ldapmain LDAP authentication... Success LDAP users with access to your GitLab server (only showing the first 100 results) User output sanitized. Found 100 users of 100 limit. Checking LDAP ... Finished Checking GitLab App ... Git configured correctly? ... yes Database config exists? ... yes All migrations up? ... yes Database contains orphaned GroupMembers? ... no GitLab config exists? ... yes GitLab config up to date? ... yes Log directory writable? ... yes Tmp directory writable? ... yes Uploads directory exists? ... yes Uploads directory has correct permissions? ... yes Uploads directory tmp has correct permissions? ... no Try fixing it: sudo chown -R git /var/opt/gitlab/gitlab-rails/uploads sudo find /var/opt/gitlab/gitlab-rails/uploads -type f -exec chmod 0644 {} \; sudo find /var/opt/gitlab/gitlab-rails/uploads -type d -not -path /var/opt/gitlab/gitlab-rails/uploads -exec chmod 0700 {} \; For more information see: doc/install/installation.md in section "GitLab" Please fix the error above and rerun the checks. Init script exists? ... skipped (omnibus-gitlab has no init script) Init script up-to-date? ... skipped (omnibus-gitlab has no init script) Projects have namespace: ... 32/1 ... yes 32/7 ... yes 4/11 ... yes 32/14 ... yes 4/16 ... yes 10/18 ... yes 12/19 ... yes 10/20 ... yes 32/21 ... yes 4/23 ... yes 12/24 ... yes 10/25 ... yes 10/26 ... yes 4/27 ... yes 29/28 ... yes 24/31 ... yes 12/32 ... yes 29/35 ... yes 4/36 ... yes 4/37 ... yes 42/39 ... yes 32/40 ... yes 4/41 ... yes 29/42 ... yes 42/43 ... yes 42/44 ... yes 24/45 ... yes 4/46 ... yes 29/47 ... yes 32/48 ... yes 48/49 ... yes 4/50 ... yes 48/51 ... yes 52/52 ... yes 24/53 ... yes 58/54 ... yes 58/55 ... yes 42/56 ... yes 29/57 ... yes 48/59 ... yes 4/60 ... yes 42/61 ... yes 58/62 ... yes 29/63 ... yes 4/64 ... yes 32/68 ... yes 42/69 ... yes 79/70 ... yes 42/71 ... yes 79/72 ... yes 79/73 ... yes 79/74 ... yes 79/75 ... yes 79/76 ... yes 79/77 ... yes 79/78 ... yes 79/79 ... yes 79/80 ... yes 79/81 ... yes 88/82 ... yes 7/83 ... yes 4/85 ... yes 179/86 ... yes 42/87 ... yes 58/88 ... yes 217/90 ... yes 29/91 ... yes 58/92 ... yes 29/93 ... yes 32/95 ... yes 29/96 ... yes 79/97 ... yes 32/98 ... yes 7/99 ... yes 24/100 ... yes 29/101 ... yes 29/102 ... yes 29/103 ... yes 42/107 ... yes 24/108 ... yes 79/109 ... yes 58/110 ... yes 58/111 ... yes 58/112 ... yes 58/113 ... yes 139/114 ... yes 42/115 ... yes 134/116 ... yes 58/117 ... yes 29/118 ... yes 42/119 ... yes 24/120 ... yes 24/121 ... yes 42/122 ... yes 24/123 ... yes 179/124 ... yes 179/125 ... yes 58/126 ... yes 24/127 ... yes 179/128 ... yes 24/129 ... yes 79/130 ... yes 24/131 ... yes 24/132 ... yes 58/133 ... yes 188/134 ... yes 42/136 ... yes 52/137 ... yes 134/138 ... yes 134/139 ... yes 134/140 ... yes 134/141 ... yes 134/142 ... yes 134/143 ... yes 134/144 ... yes 134/145 ... yes 134/146 ... yes 134/147 ... yes 32/148 ... yes 24/149 ... yes 42/150 ... yes 179/151 ... yes 188/152 ... yes 42/153 ... yes 79/154 ... yes 139/155 ... yes 24/156 ... yes 24/157 ... yes 217/158 ... yes 42/159 ... yes 24/160 ... yes 7/161 ... yes 32/162 ... yes 12/163 ... yes 12/164 ... yes 7/165 ... yes 7/166 ... yes 12/167 ... yes 12/168 ... yes 12/169 ... yes 139/170 ... yes 139/171 ... yes 139/172 ... yes 139/173 ... yes 139/174 ... yes 139/175 ... yes 224/176 ... yes 24/177 ... yes 24/178 ... yes 4/179 ... yes 224/180 ... yes 58/181 ... yes 139/182 ... yes 7/183 ... yes 24/184 ... yes 240/185 ... yes 240/186 ... yes 240/187 ... yes 42/188 ... yes 4/189 ... yes 58/190 ... yes 58/191 ... yes 24/192 ... yes 24/193 ... yes 42/194 ... yes 42/195 ... yes 224/196 ... yes 139/197 ... yes 32/198 ... yes 24/199 ... yes 58/200 ... yes 217/201 ... yes 252/202 ... yes 252/203 ... yes 252/204 ... yes 252/205 ... yes 252/206 ... yes 252/207 ... yes 58/208 ... yes 58/209 ... yes 58/211 ... yes 58/212 ... yes 79/213 ... yes 24/214 ... yes 24/215 ... yes 7/216 ... yes 7/217 ... yes 32/218 ... yes 24/219 ... yes 7/220 ... yes 7/221 ... yes 7/222 ... yes 7/223 ... yes 252/224 ... yes 32/225 ... yes 24/226 ... yes 32/227 ... yes 7/228 ... yes 302/229 ... yes 252/230 ... yes 252/231 ... yes 252/232 ... yes 252/233 ... yes 32/234 ... yes 32/235 ... yes 24/236 ... yes 252/237 ... yes 252/238 ... yes 252/239 ... yes 7/240 ... yes 7/241 ... yes 7/242 ... yes 7/243 ... yes 7/244 ... yes 7/245 ... yes 58/246 ... yes 58/247 ... yes 58/248 ... yes 24/281 ... yes 24/282 ... yes 7/307 ... yes 7/308 ... yes 7/309 ... yes 24/310 ... yes 32/311 ... yes 252/312 ... yes 139/315 ... yes 252/316 ... yes 58/317 ... yes 7/319 ... yes 252/320 ... yes 252/321 ... yes 24/322 ... yes 24/323 ... yes 24/324 ... yes 24/325 ... yes 7/326 ... yes 252/327 ... yes 7/328 ... yes 252/329 ... yes Redis version >= 2.8.0? ... yes Ruby version >= 2.5.3 ? ... yes (2.6.3) Git version >= 2.22.0 ? ... yes (2.22.0) Git user has default SSH configuration? ... yes Active users: ... 234 Elasticsearch version 5.6 - 6.x? ... skipped (elasticsearch is disabled) Checking GitLab App ... Finished Checking GitLab subtasks ... Finished </pre> </details> ### Possible fixes (If you can, link to the line of code that might be responsible for the problem)
issue