Banno / getsentry-ldap-auth

A Sentry extension to add an LDAP server as an authention source.
Apache License 2.0
163 stars 53 forks source link

Auto populate 'Admin' and/or 'Superuser' #50

Open klemenag opened 4 years ago

klemenag commented 4 years ago

In webinterface (Admin --> Users --> ) there is an option to allow a user to be :

By using mapping from Sentry ( 'owner', 'admin', 'manager', 'member') and LDAP groups, I have successfully integrated this functionality - so, a new user, as a member of a proper group in LDAP, is assigned a proper Sentry role.

But, users who are Owners and/or Admins don't have Admin and/or Superuser 'ticked' (turned on). So basically, a new member has a role of Owner or Admin, but he is not allowed in the Admin section.

Is it possible to assign this based on LDAP group membership (or any other parameter)? Screenshot from 2020-08-20 10-51-12