keycloak-uncached

manageMembership not deleted

8/10/2017 10:25:44 AM

Details

diff --git a/services/src/main/java/org/keycloak/services/resources/admin/permissions/GroupPermissions.java b/services/src/main/java/org/keycloak/services/resources/admin/permissions/GroupPermissions.java
index 722ea1c..ea70a05 100644
--- a/services/src/main/java/org/keycloak/services/resources/admin/permissions/GroupPermissions.java
+++ b/services/src/main/java/org/keycloak/services/resources/admin/permissions/GroupPermissions.java
@@ -188,6 +188,10 @@ class GroupPermissions implements GroupPermissionEvaluator, GroupPermissionManag
         if (manageMembersPermission == null) {
             authz.getStoreFactory().getPolicyStore().delete(viewMembersPermission.getId());
         }
+        Policy manageMembershipPermission = manageMembershipPermission(group);
+        if (manageMembershipPermission != null) {
+            authz.getStoreFactory().getPolicyStore().delete(manageMembershipPermission.getId());
+        }
         Resource resource = groupResource(group);
         if (resource != null) authz.getStoreFactory().getResourceStore().delete(resource.getId());
     }