As mentioned earlier User Management Delegation module has two set of plugins. One of set of plugins is availalble for Confluence and other set is for Jira.
Let's get more information each set of plugins available with this module:
Confluence Plugins
Information about these plugins is available at Plugins -> Delegate Plugin under Admin console.
- Configure Delegate User Management Xwork Plugin
It provides interface to configure User Management Delegation module.
Note: This interface is only available to Confluence Administrators
- delegateusermgmtaction Xwork Plugin
It provides User Interface to
1) display list of all wiki spaces to which user is Space Administrator
2) accepts list of userids and list of users groups to associate for given wiki space
Note: This interface is available to Space Administrators
- Verfiy User Role XML RPC Plugin
From Jira (through Jira XML RPC User Management Plugin), call will be made to verify if user is a Space Administrator for given space or not.
Jira Plugin
Information about this plugin is available at Plugins -> Delegate Space Admin - Jira Plugin under System Section
- Delegate User Management Services (delegateadminrpc)
This XML RPC plugin is called from Confluence delegateusermgmt Xwork plugin to process list of users for intended action.
Execution Details
Here is the little bit of explaination of how these all plugins interact with each other to process user requests.
All action starts on Confluence side. To use this module, point your browser to confluence_base_url/plugins/delegateusermgmt/delegateusermgmt.action
1. First Screen shows you all wiki spaces to which you are a Space Administrator
2. On next screen, you will list of all user groups that are available for this Wiki Space. Enter userids (comma separated) with user groups to which you want them to associate.
3. On submission along with userids and user groups information, unique userid is also passed along. Information is sent to Jira XML RPC Service (delegateadminrpc).
This Service API first authenticates user in two steps:
1. First it gets the requester userid and key for space to work on. It is sent to Verfiy User Role Confluence XML RPC Plugin which verifies that this user is Space Administrator for space related to which we are processing data.
2. Another authentication needed to make sure that only qualified user himself is requesting this operation and nobody trying to proxy him shouldn't be able to perform intended action. For this, we get the unique id for this user and match it with id that is being sent along with data.
If both steps returns true, then user is authenticated successfully and allowed to do the requested operation. Once the operation is performed and results (success/failure messages, not processed userids, not available user groups) are sent back to confluence xwork plugin for display back to user.