OnDemand does not respond to user group change for "Disabling applications"

Get Help
1

Hello!
I’m using OOD 4.0.0 with configured “OnDemand Dex for LDAP”.

In accordance with the section “Customizations/Disabling applications” I changed the access rights for the following applications:
drwxr-x— 3 root hpc 4096 Feb 3 21:42 bc_desktop
drwxr-x— 14 root hpc 4096 Feb 3 21:42 myjobs
drwxr-x— 10 root hpc 4096 Feb 3 21:42 shell
drwxr-x— 2 root hpc 4096 Feb 3 21:42 system-status

Now if the ldap user is in the ldap “hpc” group - the applications are available, if not - the applications are not available. This solution works fine, but only after the user clicks on the “Restart Web Server” link.

“Log Out” and then “Log In” do not update the user’s group membership.

I set the variable “oidc_session_inactivity_timeout: 60” in ood_portal.yml. But automatic session termination due to inactivity also does not update the user’s group membership.

I assume there is a cache somewhere that needs to be updated.

Please help me solve the problem.

2

Hello! Thanks for reporting this - I was able to reproduce it, and I suspect you’re right about it being a caching issue but I haven’t yet started to dig. I’ve created an issue for it: OnDemand does not respond to user group change for disabling applications · Issue #4138 · OSC/ondemand · GitHub so that the rest of the team is aware.