tildaslash / RatticWeb

Password Management for Humans
http://rattic.org/
GNU General Public License v2.0
475 stars 149 forks source link

staff management issue #382

Open manyakos opened 8 years ago

manyakos commented 8 years ago

Hi,

I want to use rattic in LDAP environment, i added ldap settings.. staff = CN=Oguzhan Arslan,OU=aaaa,OU=bbbb,OU=cccc,... the problem is "Staff Management" menu is not beeing active.. i found auth_user table "is_staff" field and set manually 1 to see that user will be staff or not.. I see it temporarirly staff however it loses again..

what do you advise about this issue?

fschndr commented 8 years ago

Hey,

is the CN you specify a group or a user? If the ldap staff setting is set, it looks up the groups of your user and checks if one of your group is matching with the staff group from the settings.

# Determines which LDAP users are staff, if not defined, privilege can be set manually
if config.has_option('ldap', 'staff'):
    AUTH_LDAP_USER_FLAGS_BY_GROUP['is_staff'] = confget('ldap', 'staff', '')

I guess this is also the reason for resetting the "is_staff" field in the Database when you logging in again.