-
Type:
Bug
-
Status: Done
-
Resolution: Done
-
Affects Version/s: 6.10.1
-
Fix Version/s: 6.11.0
-
Component/s: None
-
Labels:None
-
Severity:Critical
In HA environment, after deleting a group, it can still be achieved from the other members in the cluster for a period of time.
Steps to reproduce.
- Setup an Artifactory HA environment
- Create a group:
$ curl -uadmin:<password> -XPUT http://localhost:8081/artifactory/api/security/groups/group123 -H "Content-Type: application/json" -d"{}"
- Issue a DELETE request for the created group:
$ curl -uadmin:<password> http://localhost:8081/artifactory/api/security/groups/group123 -XDELETE
- Issue a GET group request to one of the other member in the cluster and notice that group detail returned in the output (instead "404")
$ curl -uadmin:<password> http://localhost:8081/artifactory/api/security/groups/group123
- After a few minutes the results are sync