diff options
| author | Girish Ramakrishnan <girish@cloudron.io> | 2015-08-18 21:34:03 -0700 |
|---|---|---|
| committer | Girish Ramakrishnan <girish@cloudron.io> | 2015-08-18 23:49:12 -0700 |
| commit | 24d7a86a8d35aa1fadf05deaa10e141d33ea6632 (patch) | |
| tree | 81f20ad9fa63e815ae0accf59a39eca2252b6068 /routers | |
| parent | 03b85b73af03eae98308fc3d36cdbd47db1503d6 (diff) | |
Set IsAdmin using LDAP
The IsAdmin flag is set based on whether the admin filter
returned any result. The admin filter is applied with the user dn
as the search root.
In the future, we should update IsAdmin as well on each login.
Alternately, we can have a periodic sync operation.
Diffstat (limited to 'routers')
| -rw-r--r-- | routers/admin/auths.go | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/routers/admin/auths.go b/routers/admin/auths.go index bb73026b..8123eaaa 100644 --- a/routers/admin/auths.go +++ b/routers/admin/auths.go @@ -71,6 +71,7 @@ func NewAuthSourcePost(ctx *middleware.Context, form auth.AuthenticationForm) { BindPassword: form.BindPassword, UserBase: form.UserBase, Filter: form.Filter, + AdminFilter: form.AdminFilter, AttributeName: form.AttributeName, AttributeSurname: form.AttributeSurname, AttributeMail: form.AttributeMail, @@ -160,6 +161,7 @@ func EditAuthSourcePost(ctx *middleware.Context, form auth.AuthenticationForm) { AttributeSurname: form.AttributeSurname, AttributeMail: form.AttributeMail, Filter: form.Filter, + AdminFilter: form.AdminFilter, Enabled: true, }, } |