Allow user to user either "and" or "or" behavior when verifying user group membership - Githubissues

StackStorm / st2-auth-ldap

LDAP backend for user authentication in StackStorm. Previously LDAP backend for EWC.

https://docs.stackstorm.com/authentication.html

Apache License 2.0

5 stars 12 forks source link

Allow user to user either "and" or "or" behavior when verifying user group membership #32

Closed Kami closed 7 years ago

Kami commented 7 years ago

This pull request allows user to specify group_dns_check LDAP auth backend config parameter in st2.conf.

This parameter controls how user group membership check if perform and has two valid values:

and - user needs to be member of all the specified groups
or - user needs to be member of one or more of the specified groups

For safety reasons, and is a default behavior.

Note: This was a feature request from one of our users (Mastercard).

TODO

[x] Tests
[x] Sync st2docs with README.md in this repo (backend options). Once this PR is merged.