Graylog2 / Graylog2/graylog2-server

Authentication Service Group Sync - UI editable without license

Open
#22,120 0 comments 0 reactions 0 assignees View on GitHub
bug test-day triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

If you have already configured an Authentication Service with Group synchronization, and then your Enterprise license expires or becomes invalid, the configuration screen for Group sync should be read-only, however some elements are still editable.

## Expected Behavior

All elements on the Group Synchronization page should be read-only.

## Current Behavior

Including/Excluding groups to inport at the bottom is still editable:

https://github.com/user-attachments/assets/5d929f49-4508-4de8-acdf-fb4faead1243

## Steps to Reproduce (for bugs)

1. With a valid Graylog license, edit an authentication service and set up Group Synchronization with a few groups
2. Remove the Graylog license
3. Go back to the Group Synchronization edit screen, and see that you can still add/remove groups at the bottom

## Context

Based on the UI, it appears that a user can stil edit these fields. However, when you click save, although it appears to save normally, the changes do not actually get saved on the backend. So this appears to be only a UI issue.

## Your Environment

* Graylog Version: 6.2.0-beta.2+f564877
* Java Version: OpenJDK Runtime Environment Temurin-17.0.14+7
* OpenSearch Version: 2.10.0
* MongoDB Version: 6.0
* Operating System: Debian
* Browser version: 134.0.6998.165 (Official Build) (64-bit)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.