Github user markap14 commented on the issue:
https://github.com/apache/nifi/pull/2678
@mcgilman I have pushed another commit, which I believe addresses the issue
that you raised. I also found that if we have Group A that has a processor and
that processor referenced a controller service in the same group, we didn't
allow the user to move the processor outside of Group A. However, if the
processor lived within Group B and Group B lived within Group A (i.e., GroupA
is the outer group, which has child Group B, and child group has a Processor)
then we did actually allow the entire Group B to be moved outside of A. I
updated the verifyMove() logic to also prevent this, since we don't allow the
processor to be moved out directly.
---