Administrator group not being removed after removing user from the group configured at "Group Claim value for administrator users" #10283

Open
opened 2025-11-02 09:03:10 -06:00 by GiteaMirror · 1 comment
Owner

Originally created by @dloez on GitHub (Feb 16, 2023).

Description

After being able to configure group mapping using Azure as an Authentication Source, we have tested that when we configure the group "gitea-administrator" in the field "Group Claim value for administrator users" all users that are members of that group are correctly mapped to Administrators on Gitea, but if then we remove the user from that group they still have administrator privileges on Gitea.

Is this a bug or it is intended?

As a note, we tested this after https://github.com/go-gitea/gitea/pull/21441 was merged.

Gitea Version

1.19

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

No response

How are you running Gitea?

docker

Database

None

Originally created by @dloez on GitHub (Feb 16, 2023). ### Description After being able to configure group mapping using Azure as an Authentication Source, we have tested that when we configure the group "gitea-administrator" in the field "Group Claim value for administrator users" all users that are members of that group are correctly mapped to Administrators on Gitea, but if then we remove the user from that group they still have administrator privileges on Gitea. Is this a bug or it is intended? As a note, we tested this after https://github.com/go-gitea/gitea/pull/21441 was merged. ### Gitea Version 1.19 ### Can you reproduce the bug on the Gitea demo site? No ### Log Gist _No response_ ### Screenshots _No response_ ### Git Version _No response_ ### Operating System _No response_ ### How are you running Gitea? docker ### Database None
GiteaMirror added the type/bug label 2025-11-02 09:03:10 -06:00
Author
Owner

@evadim commented on GitHub (Dec 5, 2023):

I halso hit this bug today.

I got it removed after I put random symbols to "Group Claim value for administrator users" and user log in next time - have to manually log out and log in again.

Looks like this parameter not updated when value changed to empty and rights change only during log in process.

@evadim commented on GitHub (Dec 5, 2023): I halso hit this bug today. I got it removed after I put random symbols to "Group Claim value for administrator users" **and** user log in next time - have to manually log out and log in again. Looks like this parameter not updated when value changed to empty and rights change only during log in process.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#10283