Empty Users and Groups

At some point in time during the past ~6 years Users and Groups no longer shows any content in my deployed instance (Ubuntu 22.04.deb install with PostgreSQL).

Apart from the emergency admin account, all access is via LDAP, and that continues to work, but with the “empty” display of users and groups it is no longer possible to assign (or restrict) uses or groups on a page.

Issue was “noticed” with 16.5.0 (first time needed to make a permissions change in a “while”), and have upgraded to 16.6 with no improvement.

I’ve looked at User and Groups are not displayed after Update and Disappeared Users and Groups after updating to XWiki 10.11.10

The Distribution Wizard has been run after every upgrade, and there have not been any obvious with upgrades.

Browser Dev Tools Console does show some errors, but as they appear on every page, I presume are not related.

require.min.js?r=1:5  Uncaught Error: fromText eval for node-module!fast-diff failed: EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.youtube.com blob:".

https://requirejs.org/docs/errors.html#fromtexteval
    at makeError (require.min.js?r=1:5:1795)
    at e.<anonymous> (require.min.js?r=1:5:12316)
    at Function.fromText (require.min.js?r=1:5:1542)
    at Object.success (Script?language=en&docVersion=10.1:47:228)
    at c (jquery.min.js?r=1:2:25304)
    at Object.fireWith [as resolveWith] (jquery.min.js?r=1:2:26053)
    at l (jquery.min.js?r=1:2:77782)
    at XMLHttpRequest.<anonymous> (jquery.min.js?r=1:2:80265)
makeError @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
(anonymous) @ Script?language=en&docVersion=10.1:47
c @ jquery.min.js?r=1:2
fireWith @ jquery.min.js?r=1:2
l @ jquery.min.js?r=1:2
(anonymous) @ jquery.min.js?r=1:2
load
send @ jquery.min.js?r=1:2
ajax @ jquery.min.js?r=1:2
(anonymous) @ jquery-migrate.js:379
e.<computed> @ jquery-migrate.js:181
ce.<computed> @ jquery.min.js?r=1:2
load @ Script?language=en&docVersion=10.1:47
(anonymous) @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
M @ require.min.js?r=1:5
callPlugin @ require.min.js?r=1:5
fetch @ require.min.js?r=1:5
check @ require.min.js?r=1:5
enable @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
each @ require.min.js?r=1:5
emit @ require.min.js?r=1:5
check @ require.min.js?r=1:5
enable @ require.min.js?r=1:5
enable @ require.min.js?r=1:5
callPlugin @ require.min.js?r=1:5
fetch @ require.min.js?r=1:5
check @ require.min.js?r=1:5
enable @ require.min.js?r=1:5
enable @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
each @ require.min.js?r=1:5
enable @ require.min.js?r=1:5
enable @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
each @ require.min.js?r=1:5
enable @ require.min.js?r=1:5
init @ require.min.js?r=1:5
(anonymous) @ require.min.js?r=1:5
setTimeout
req.nextTick @ require.min.js?r=1:5
s @ require.min.js?r=1:5
requirejs @ require.min.js?r=1:5
(anonymous) @ Script?language=en&docVersion=10.1:49
compatibility.js:544  Uncaught TypeError: Cannot read properties of undefined (reading 'initialize')
    at b (compatibility.js:544:25)
    at compatibility.js:549:5
    at compatibility.js:541:1

Any suggestions on how to resolve this would be appreciated (-:

On further investigation, there are other sections of Global Administration that appear to be “missing” elements, full list as below.

Users & Rights
Users: Only shows “Create user” (does not show any users)
Groups: Only shows “Create group” (does not show any Groups)
Rights: Does not show any Groups or Users, but does show “Unregistered Users” under Users

Look & Feel
Menus: nothing shown
Applications Panel: nothing shown
Navigation Panel: nothing shown
Image Styles: nothing shown
Lightbox: nothing shown

Search
Search: nothing shown
Search Suggest: nothing shown
Indexing User: nothing shown

Social
Mentions: nothing shown
Message Stream: nothing shown

Wikis
Wiki Templates: only shows “A template is a wiki that will be considered as a model to create new wikis. When a user selects a template to create a new wiki, all the content of the template is copied in the new wiki.”
Creation Rights: Does not show any Groups or Users, but does show “Unregistered Users” under Users

Other
Logging: only shows “Here you can review and modify the log level associated to a registered logger. or empty log level means that the logger inherits from its parent logger which is the package prefix when it’s a package or the default level in the logger implementation configuration if there is no parent.”

I’m wondering if the “simple” solution here is to export and then import into a clean instance.

Ran an export, spun up a new instance (used Docker), imported the export, cleaned up the export, enabled LDAP, set permissions, cutover to production

and Users and Groups are now empty again…

/me is an idiot

the issue was a CSP on the reverse proxy…