Description of problem:
When creating a Role and wanting to add Groups to the role the GUI will only list 1000 groups. Most likely due to the Oracle 1000 IN Clause limitation.
Version-Release number of selected component (if applicable):
We need to go back through the codebase *again* and make sure we've got all of these.
Need to investigate if this is straightforward to fix in JON2.4.1. It will be of limited use however since adding filter/search feature to the ldap groups is out of scope for 2.4.1
Moving this to jon3.0. We don't blow up in this case right now, we are just limited to showing the first 1000groups. This is only going to be properly fixed when we add group search/filtering in 3.0
As I said earlier I don't think the solution here is just to retrieve 10,000groups, but to allow better filtering/searching so you can actually find the probably at most 50 groups you are actually interested in. Setting needinfo on spinder so he can comment on what we have/could have here.
This was fixed for jon3.0 already to support filtering of ldap groups by name. See https://bugzilla.redhat.com/show_bug.cgi?id=643963. I never looked into patching the JSF 2.4.1 code. Are we reconsidering modifying the JSF 2.4.1 code and should i look into this?
If we've got a search filter in 3.0 then that should be sufficient