Groups "Used by" ignores share grants — a group that grants access reads "Not used" #687

New issue

Closed

opened 2026-09-23 10:17:39 +00:00 by Cordy · 1 comment

Cordy commented

2026-09-23 10:17:39 +00:00

Owner

Found by the #656 QA pass, §2 admin scouting (v0.6.247, files-bao).

Where: Administration → Users & access → Groups.

Steps: app group qa656 (member sharer1) holds an active grant: _qa/drop is shared with qa656, Can view, and sharer1 sees "drop · Can view via qa656" under Shared with me. Its row in App-owned groups says Used by: Not used.

Expected: "Used by" counts share grants alongside peering lists, spaces and the admin group ("1 share · …"). This matters most at the moment an admin decides whether Delete is safe.
Seen: "Not used", even though deleting the group would silently revoke (or orphan) the access it grants.

Screenshot: 656-admin-users-groups-bao.jpg

Found by the #656 QA pass, §2 admin scouting (v0.6.247, files-bao). **Where:** Administration → Users & access → Groups. **Steps:** app group `qa656` (member sharer1) holds an active grant: `_qa/drop` is shared with `qa656`, Can view, and sharer1 sees "drop · Can view via qa656" under Shared with me. Its row in App-owned groups says **Used by: Not used**. **Expected:** "Used by" counts share grants alongside peering lists, spaces and the admin group ("1 share · …"). This matters most at the moment an admin decides whether **Delete** is safe. **Seen:** "Not used", even though deleting the group would silently revoke (or orphan) the access it grants. **Screenshot:** `656-admin-users-groups-bao.jpg`

Cordy added this to the v0.7 — Closed beta (dogfood + hardening) milestone

2026-09-23 10:17:39 +00:00

Cordy referenced this issue

2026-09-23 10:22:10 +00:00

On-demand Opus browser QA pass: full feature matrix + UI consistency audit + admin dashboard + one-time OpenCloud comparison (supersedes #642) #656

Cordy commented

2026-09-23 10:39:15 +00:00

Author

Owner

This got worse during #656 cleanup: Delete group fails silently.

Groups → qa656 → Delete opens #gdeldlg, which says "Nothing references this group. References simply stop matching…".
Clicking Delete group (real click) sends DELETE /api/v1/admin/groups/294b6a01804c73f6 → 409 this group is the addressee of 1 share grant(s); revoke those shares first (the Used by column lists them).
The dialog stays open with no error shown. The group is not deleted.

Three layers disagree:

The server blocks the delete (correctly), and its message points to a "Used by" column that says "Not used".
The dialog promises "nothing references this group".
The UI swallows the 409.

The fix is the same as above (count grants in Used by and in the dialog's fact rows), plus surfacing a 409 in the dialog. Screenshot: 696-group-delete-silent-409.jpg.

This got worse during #656 cleanup: **Delete group fails silently.** - Groups → qa656 → Delete opens `#gdeldlg`, which says "**Nothing references this group.** References simply stop matching…". - Clicking **Delete group** (real click) sends `DELETE /api/v1/admin/groups/294b6a01804c73f6` → **409** `this group is the addressee of 1 share grant(s); revoke those shares first (the Used by column lists them)`. - The dialog stays open with no error shown. The group is not deleted. Three layers disagree: 1. The server blocks the delete (correctly), and its message points to a "Used by" column that says "Not used". 2. The dialog promises "nothing references this group". 3. The UI swallows the 409. The fix is the same as above (count grants in Used by and in the dialog's fact rows), plus surfacing a 409 in the dialog. Screenshot: `696-group-delete-silent-409.jpg`.

Cordy referenced this issue

2026-09-23 10:40:00 +00:00

Creating an app-owned GROUP silently provisions a SPACE for its members — mislabelled "Managed by the identity provider", Members 0 #690

Cordy referenced this issue

2026-09-23 10:42:14 +00:00

On-demand Opus browser QA pass: full feature matrix + UI consistency audit + admin dashboard + one-time OpenCloud comparison (supersedes #642) #656

Cordy referenced this issue from a commit

2026-09-23 18:33:37 +00:00

RED: QA batch 2 pins - admin/departed correctness (#686 #687 #688 #689 #690 #658 #657)

Cordy referenced this issue from a commit

2026-09-23 18:35:47 +00:00

GREEN splice: QA batch 2 admin/departed correctness (#686 #687 #688 #689 #690 #658 #657)