Do permissions remain when the permitted user is deleted?

Submitted: October 14, 2008
Do permissions grants (and denies) remain when the user granted a permission is deleted?
They do not.

When a user is deleted using tools like the ant target "deluser", the removePortalUID() method on RDBMUserIdentityStore is invoked with the target user's UID as its argument. The implementation of this method in RDBMUserIdentityStore (the portal-database-backed default implementation), among other behaviors, explicitly deletes rows from the uPortal database permissions table granting permissions specifically to the user with the given UID.

Users deleted from uPortal and then re-added will retain none of the permission grants (and denies) assigned to them specifically as individual users. They may continue to be affected by permissions applied to groups of which they are a member, whether receiving that membership via group membership templating or on the basis of user attributes or other group store implementations.