Bug 643173

Summary: Group> Role assignment for LDAP groups will only list 1000 groups
Product: [Other] RHQ Project Reporter: dsteigne
Component: DatabaseAssignee: RHQ Project Maintainer <rhq-maint>
Status: CLOSED WONTFIX QA Contact: Mike Foley <mfoley>
Severity: medium Docs Contact:
Priority: high    
Version: 3.0.0CC: spinder
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-06-08 19:41:15 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 625146    

Description dsteigne 2010-10-14 20:28:53 UTC
Description of problem:

When creating a Role and wanting to add Groups to the role the GUI will only list 1000 groups.  Most likely due to the Oracle 1000 IN Clause limitation.


Version-Release number of selected component (if applicable):

2.4

Comment 1 Charles Crouch 2010-10-18 15:58:29 UTC
We need to go back through the codebase *again* and make sure we've got all of these.

Comment 2 Charles Crouch 2010-11-02 01:00:32 UTC
Need to investigate if this is straightforward to fix in JON2.4.1. It will be of limited use however since adding filter/search feature to the ldap groups is out of scope for 2.4.1

Comment 3 Charles Crouch 2010-11-10 16:52:11 UTC
Moving this to jon3.0. We don't blow up in this case right now, we are just limited to showing the first 1000groups. This is only going to be properly fixed when we add group search/filtering in 3.0

Comment 4 Charles Crouch 2011-03-31 23:11:49 UTC
As I said earlier I don't think the solution here is just to retrieve 10,000groups, but to allow better filtering/searching so you can actually find the probably at most 50 groups you are actually interested in. Setting needinfo on spinder so he can comment on what we have/could have here.

Comment 5 Simeon Pinder 2011-04-01 10:03:32 UTC
This was fixed for jon3.0 already to support filtering of ldap groups by name. See https://bugzilla.redhat.com/show_bug.cgi?id=643963.  I never looked into patching the JSF 2.4.1 code. Are we reconsidering modifying the JSF 2.4.1 code and should i look into this?

Comment 6 Charles Crouch 2011-06-08 19:41:15 UTC
If we've got a search filter in 3.0 then that should be sufficient