Details
-
Bug Report
-
Resolution: Fixed
-
L3 - Default
-
None
-
None
Description
As a logged-in user, in the user profile section of the welcome page, I want to see only the groups I am a member of.
The behavior before this fix has been as follows:
- In the profile section, all existent groups can be seen.
- In case authorization is enabled, all groups where the user has READ authorization can be seen.
This is completely confusing for the user. E.g. if connected to an LDAP/Active directory as camunda-admin, a user would be able to see all the groups of the LDAP/Active directory (which may be a lot of groups). In other cases, e.g. in the case a user is a member of a read-only group being authorized to see all groups it would be the same.
The current implementation doesn't separate the aspect "I'm a member of group X" and "I'm authorized to see group X".