Skip to content

v1.6.6

Choose a tag to compare

@mastacontrola mastacontrola released this 17 Aug 18:21
· 7 commits to main since this release
87176fd

Adds the OIDC provider-group tabs to the Role and User Group pages (#10), so a
provider group can be associated from either end rather than only from the
OIDC Groups page.

The tabs mirror the LDAP ones, including their permission rule: rendering
takes oidcgroup.view and saving takes oidcgroup.edit, not role.edit
or usergroup.edit. Granting a provider group to a role widens what every
holder of that role gets at sign-in, so being able to edit roles is not by
itself enough to hand that out. A refusal answers 403 rather than silently
doing nothing. Both tabs also offer create-and-associate, so a group can be
created without leaving the page.

Also in this release:

  • the plugin test suite now runs on every pull request (#11), on PHP 7.4 and
    8.3, via fog-workflows/.github/workflows/fog-plugins-tests.yml;
  • tests/group-tab-permissions.test.php covers the LDAP and OIDC group tabs
    together, so the two cannot drift apart;
  • .github/ is excluded from this tarball (#12) — the installer untars this
    straight into lib/plugins, which the web server serves.

Requires fogproject working-1.6 with the OIDC plugin's own prerequisites.
Pair with the FOG_PLUGINS_VERSION bump to v1.6.6.