[Phpgroupware-tracker] [bug #15916] Again trouble handling LDAP account...

[Marco Gaiarin]

Follow-up Comment #2, bug #15916 (project phpgroupware):

I'm only speaking about membership, not the full ACL.

Apart that it is not clear to me because simply group membership are taken
from LDAP instead from ACL (i suspect hystorical reason, too code to change
in too many places ;), i propose a very simple task:

At every user login into phpgw, all the group membership of the user are
reset (delete from phpgw_acl where acl_appname='phpgw_group' and
acl_account=1000) and reinserted using as source the LDAP membership data.

Clearly this is a brute-force approach, a beter approach would be to verify
every membership and add/remove only the needed one.

Clearly this could be achived by a global/config switch, not enabled by
default. ;)

AFAI've understood phpgw, this could not pose any problem at all to phpgw, or
at least not pose any problem more hard that modifing membership in
Administration page by hand.


In this way i will be able to do user management with every interface i
like.
Hope now it is clear, and hope also that i've not missed too many
``details''... O;-)))



    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?func=detailitem&item_id=15916>

_______________________________________________
  Messaggio inviato con/da Savannah
  http://savannah.gnu.org/