v1.6.6
Adds the OIDC provider-group tabs to the Role and User Group pages (#10), so a
provider group can be associated from either end rather than only from the
OIDC Groups page.
The tabs mirror the LDAP ones, including their permission rule: rendering
takes oidcgroup.view and saving takes oidcgroup.edit, not role.edit
or usergroup.edit. Granting a provider group to a role widens what every
holder of that role gets at sign-in, so being able to edit roles is not by
itself enough to hand that out. A refusal answers 403 rather than silently
doing nothing. Both tabs also offer create-and-associate, so a group can be
created without leaving the page.
Also in this release:
- the plugin test suite now runs on every pull request (#11), on PHP 7.4 and
8.3, viafog-workflows/.github/workflows/fog-plugins-tests.yml; tests/group-tab-permissions.test.phpcovers the LDAP and OIDC group tabs
together, so the two cannot drift apart;.github/is excluded from this tarball (#12) — the installer untars this
straight intolib/plugins, which the web server serves.
Requires fogproject working-1.6 with the OIDC plugin's own prerequisites.
Pair with the FOG_PLUGINS_VERSION bump to v1.6.6.