Bug: Cannot remove members from Board or card

[rnck]

Hi,

a board admin of my wekan instance reported, that he cannot remove members from his board or from cards. By clicking remove the member diappears and re-appears shortly after. Though removement is logged, the member still has access to the board.

The member is authenticated via LDAP. The board admin is a local wekan user.

Server Setup Information:

• Did you test in newest Wekan?: yes
• Wekan version: 3.44 (docker)
• Operating System: debian 9.11
• Deployment Method(snap/docker/sandstorm/mongodb bundle/source): docker
• Http frontend if any (Caddy, Nginx, Apache, see config examples from Wekan GitHub wiki first): Apache
• Node Version: 8.16.1
• MongoDB Version: 3.2.21
• Wekan only works on newest desktop Firefox/Chromium/Chrome/Edge/Chromium Edge and mobile Chrome. What webbrowser version are you using? 60.9.0esr (64-Bit)

Problem description:

• REQUIRED: Add recorded animated gif about how it works currently, and screenshot mockups how it should work. Use peek to record animgif in Linux https://github.com/phw/peek

Sorry, I cannot privide an animated gif because auf data privacy.

• Explain steps how to reproduce

I tried to reproduce, but I couldn't. In my test boards (same server) removing members is possible.

• If using Docker, what does show command sudo docker logs wekan-app ? Please anonymize logs.

Please see attachment wekan bug log 2019-09-26.zip

Please let me know if you need more information.

[xet7]

You have Outgoing Webhook at that board, that Outgoing Webhook URL is wrong or does not work, you need to remove it, so you can add members to cards.

[rnck]

Adding members is not the problem. Removing them does not work. I'll check for the webhook.

[rnck]

There is no outgoing webhook in that board. Collection 'integrations' has 0 records. It seems that other boards are not affected.

[JASG94]

Same problem here, can't delete a member in a board.

[andreasgrill]

Same problem, we have removed a user from Wekan but now an user "()" is visible. If I click on the user and then "Remove from Board", the user disappears but re-appears quickly.

[xet7]

@andreasgrill

What Wekan version you have?

When I tested in Wekan v3.56 Snap, I did:

• Add member to board
• Add member to card
• Remove member from card
• Remove member from board.

I did not have any errors. This is locally when not using LDAP.

When newest Wekan v3.56 for Univention is released in new future, I will test with Univention included LDAP.

[andreasgrill]

I used v.3.56 through docker-compose. The user was created with Password Authentication (although we have enabled LDAP later, but the admin panel said password authentication next to the user name).

What I did was I changed the password of the user. Then I logged in as the user -> Edit Profile -> Delete.
After that the user still appeared on the boards that he previously was joined.

[andreasgrill]

Oh and when I select Remove Member the dialog says: "Remove undefined (undefined) from ..."

[xet7]

Wekan can not remove any LDAP users from LDAP server. LDAP users should be removed from LDAP admin interface, not Wekan.

For non-technical features and fixes, you can contact my paid Commercial Support:
https://wekan.team/commercial-support/

For some technical instructions, if it's possible for you:

Before any changes, please make backup:
https://github.com/wekan/wekan/wiki/Backup

You can install same MongoDB version and expose MongoDB in docker-compose.yml.

To remove remaining user info, you can use nosqlbooster:
https://nosqlbooster.com/downloads

For Docker, usually MongoDB is at port 27017. Snap MongoDB is at port 27019.

Those () users can be removed from users table/collection. For those boards, users can be removed from boards table/collection.

[vasyugan]

Wekan can not remove any LDAP users from LDAP server. LDAP users should be removed from LDAP admin interface, not Wekan.

This isn't about LDAP. This is about being unable to remove a user from a board. My own wekan instance doesn't use LDAP. It is a docker installation. Still I'v got that very problem. I even removed the user IN MONGODB and it would reappear after a few seconds. I've got the same symptom: The user name is shown, followed by '()'. Those two zombie users both have my user name, btw.