Administrator group not being removed after removing user from the group configured at "Group Claim value for administrator users"

[dloez]

Description

After being able to configure group mapping using Azure as an Authentication Source, we have tested that when we configure the group "gitea-administrator" in the field "Group Claim value for administrator users" all users that are members of that group are correctly mapped to Administrators on Gitea, but if then we remove the user from that group they still have administrator privileges on Gitea.

Is this a bug or it is intended?

As a note, we tested this after #21441 was merged.

Gitea Version

1.19

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

No response

How are you running Gitea?

docker

Database

None

[evadim]

I halso hit this bug today.

I got it removed after I put random symbols to "Group Claim value for administrator users" and user log in next time - have to manually log out and log in again.

Looks like this parameter not updated when value changed to empty and rights change only during log in process.