[CONTINUUM-2515] Permission leak when deleting group

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.3.6
• Component/s: Security
• Assignee: Brett Porter
• Reporter: Philippe Busque
• Created: 30/Apr/10 15:49
• Updated: 06/May/10 22:13
• Resolved: 06/May/10 22:13

Description

Create a Project group.
Add projects to it.
Delete the group.

All the roles and permissions created for the projects and groups remain in the Database and interface, with no way to delete them.
Over time, when many groups are created and deleted for versioning, this create a lot of orphans permissions and roles that slows down access.

The only way to purge those orphan roles are to delete them directly in the database, a task that is complicated by the various table relations.

When deleting a group, the associated permissions and role should be automatically deleted or at the very least, prompted for deletion.

Issue Links

• is related to: CONTINUUM-1943 Deleted Project Group still appears in User assignment page
• is related to: CONTINUUM-2396 Project Group Role is not removed when the Project Group has been deleted.