Projects using permission templates are not synced when permissions templates are updated

[suhail-n]

• Version: Enterprise SonarQube 8.4.2
• Error: When permission templates are edited with new AD Groups and permissions, the changes do not reflect on the existing projects using the permission template. The permission template would have to be reapplied through a bulk update for each project.
• Steps to Reproduce.

1. Create a new private project with a permission template
2. Edit the permission template by adding a new AD Group with browse permission
3. Login with a user who is in that AD Group.
4. Attempt to browse the created project which has the permission template attached to it
5. User will not have access to view the project.

• Potential Workaround: Each time a change is created to a permission template then it would need to be manually reapplied to every project which holds the template so that the new changes are synced.

The workaround is not feasible for my use case. All projects should be automatically updated when a change occurs to a permission template. There should be no need to manually reapply the changes to every project.

[ganncamp (G Ann Campbell)]

Hi,

Welcome to the community!

@suhail-n

When permission templates are edited with new AD Groups and permissions, the changes do not reflect on the existing projects using the permission template.

Yes. There is no ongoing relationship between a permission template and a project. A template is applied automatically at project creation, and… that’s is.

@suhail-n

The permission template would have to be reapplied through a bulk update for each project.

Yes. This is how it works.

 
Ann

[suhail-n]

Hi, I’m familiar that this is how it works but if the permission template is connected to an existing project then shouldn’t the changes to the permission template automatically reflect upon that existing project?

[ganncamp (G Ann Campbell)]

Hi,

That’s just it. Projects are not connected to templates that have previously been applied to them. It’s like a cookie cutter: If I cut out 20 circle-shaped cookies with a cookie cutter/template then drop the cutter on the floor and dent it, that doesn’t change all the cookies I’ve already cut out.

 
Ann