What's the intended behaviour for permissions and changing of group type?

Christopher G. Stanton 

It does sound like you may have run into a platform bug. Normally, when you switch a group back from Public (Open Membership) to Private (Unlisted), the permissions should reset according to the default template, and “read group” access for roles like Everyone or Registered Users should be removed unless explicitly granted.

A follow-up question: are you solely using site roles to permission users, or do you also have those site roles applied as Members, Managers, or Owners? There are separate settings for membership type in the same area of the admin panel, and these can sometimes override or interact with the site role permissions in unexpected ways.

Since the permissions aren’t updating as expected, I would recommend opening a ticket with Verint Support. They can confirm whether this is a known issue in version 12.1.9.35025 and advise on any workarounds or patches. In the meantime, you may need to manually adjust the permissions for those roles to ensure the group is fully private.

Sara Collins said:

A follow-up question: are you solely using site roles to permission users, or do you also have those site roles applied as Members, Managers, or Owners?

We have a role 'Registered Users' that members are added to when they create an account, and then when they interact with a group, they would become a 'member' of that group too.

I set permissions appropriately on both in the Membership Types 'definition' for what they should and shouldn't be allowed to do.

Sara Collins said:

In the meantime, you may need to manually adjust the permissions for those roles to ensure the group is fully private.

This is what I have had to do.

An important security issue is that we can no longer trust this functionality to revert or switch permissions, and it has to be double checked each time a change is made.

Sara Collins said:

A follow-up question: are you solely using site roles to permission users, or do you also have those site roles applied as Members, Managers, or Owners?

We have a role 'Registered Users' that members are added to when they create an account, and then when they interact with a group, they would become a 'member' of that group too.

I set permissions appropriately on both in the Membership Types 'definition' for what they should and shouldn't be allowed to do.

Sara Collins said:

In the meantime, you may need to manually adjust the permissions for those roles to ensure the group is fully private.

This is what I have had to do.

An important security issue is that we can no longer trust this functionality to revert or switch permissions, and it has to be double checked each time a change is made.