Confluence LDAP - How to change all permissions for one group to another?

[Felix Grund (Scandio)]

I'm having a very large Confluence installation, where one very large group (say group A) is synchronized from LDAP. We now have a second group (say group B) that has the same users in LDAP and is synchronized with Confluence as well. We are now searching for the best way to change all permissions in Confluence associated with group A to group B. Afterwards, we aim to delete group A in LDAP. This is essentially a way to rename the group A to B.

Questions:

1. Is this a proper strategy or is there a better way to achieve this?
2. If it's a good way, what SQL statements do we have to perform? At the moment, I assume the tables CONTENT_PERM and SPACEPERMISSIONS are affected? Are there more?

Our environment:

• Confluence 5.1.5
• Windows Server 2008 R2 Standard
• MSSQL 2008

Thank you very much in advance for any hints!

[Liston Ogana]

Hello,

Could you provide the script you used to get this done. I have the same problem however the scrip provided in JRA-1391 is not particularly working for me.

Thank you!

[Felix Grund (Scandio)]

I actually solved this problem using my initial approached described in the question. All other methods seemed inadequate.

[Davin Studer]

You might be able to do this in a better fashin than with SQL. The official API's can do this kind of thing. I qwould recommend looking into the Confluence Command Line Interface as it implements those API's in an easy to use fashion.

[Felix Grund (Scandio)]

No ideas?

[Felix Grund (Scandio)]

I do not understand. The answer marked as solution says I should run this SQL:

Update cwd_group set group_name='<new_group_name>', lower_group_name='<new_group_name>' where lower_group_name='<old_group_name>';

However, this won't touch any permissions in the CONTENT_PERM and SPACEPERMISSIONS tables. So these will still point to the old group. Or am I missing something? Actually I do not really want to "rename" a group. I want to change all group permissions of one group to another.

[Tiago Comasseto]

Hi, I belive you're in the same situation is this other question: https://answers.atlassian.com/questions/98523/need-to-rename-group

Cheers