Skip to content

Deleting a group should require confirmation #4346

@bram-atmire

Description

@bram-atmire

Describe the bug (extended 2025-05-22)

The groups interface renders a delete button RIGHT next to the edit button.
If you click this button by accident, your group and all its associated policies will be immediately deleted, without a confirmation dialog.

Image

Another place where groups can be deleted without confirmation is Edit Collection > Assign Roles (for example for default bitstream read permissions and default item read permissions)

Image

To Reproduce

Steps to reproduce the behavior:

  1. Go into the groups page
  2. Try to delete a group that is not associated to workflow steps (those are protected against delete)

Expected behavior

A confirmation dialog should be rendered, where the user should re-confirm the deletion

Alternative thoughts/approaches

Maybe too draconic, but some repository managers would find it not unreasonable that group deletion should be impossible as long as there are any policies linking to the group. Forcing the user to delete the policies first before deleting the group, would be a very safe way to avoid unintended cascading deletions of groups and policies.

Metadata

Metadata

Assignees

Labels

affects: 7.xIssue impacts 7.x releasesaffects: 8.xIssue impacts 8.x releasesaffects: mainIssue impacts "main" (latest release).authorizationrelated to authorization, permissions or groupsbug

Type

Projects

Status

✅ Done

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions