phpGroupWare - Bugs: bug #15916, Again trouble handling LDAP...
You are not allowed to post comments on this tracker with your current authentication level.
bug #15916: Again trouble handling LDAP account...
Submitter: | Marco Gaiarin <gaio> | ||
Submitted: | Mon 27 Feb 2006 02:54:02 PM UTC | ||
Category: | API - Admin | Item Group: | 0.9.16.010 |
Severity: | 3 - Normal | Priority: | 5 - Normal |
Status: | Wont Fix | Privacy: | Public |
Assigned to: | Caeies | Open/Closed: | Open |
Component Version: | SVN | Operating System: | GNU/Linux - Debian |
Reproducibility: | Every Time | Planned Release: | None |
Fixed Release: |
Wed 08 Mar 2006 05:24:14 PM UTC, comment #2: |
Marco Gaiarin <gaio> |
Mon 06 Mar 2006 01:11:32 PM UTC, comment #1: Hi Marco,
|
Caeies <Caeies> |
Mon 27 Feb 2006 02:54:02 PM UTC, original submission:
|
Marco Gaiarin <gaio> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 2 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2006-03-06 | Caeies | Status | None | Wont Fix | |
Assigned to | None | Caeies |
Powered by Savane 3.13-758e.
Corresponding source code
I'm only speaking about membership, not the full ACL.
Apart that it is not clear to me because simply group membership are taken from LDAP instead from ACL (i suspect hystorical reason, too code to change in too many places ;), i propose a very simple task:
At every user login into phpgw, all the group membership of the user are reset (delete from phpgw_acl where acl_appname='phpgw_group' and acl_account=1000) and reinserted using as source the LDAP membership data.
Clearly this is a brute-force approach, a beter approach would be to verify every membership and add/remove only the needed one.
Clearly this could be achived by a global/config switch, not enabled by default. ;)
AFAI've understood phpgw, this could not pose any problem at all to phpgw, or at least not pose any problem more hard that modifing membership in Administration page by hand.
In this way i will be able to do user management with every interface i like.
Hope now it is clear, and hope also that i've not missed too many ``details''... O;-)))