This repository has been archived by the owner on Mar 31, 2022. It is now read-only.
Obtaining roles from LDAP user attributes should work for in-memory user management #13
Assignees
Milestone
Comments
artemy63
pushed a commit
that referenced
this issue
Feb 20, 2022
…ser management #13 - Introduced new interface that responsible for getting authorities for certain user - Added extension of DefaultLdapAuthoritiesPopulator in order to use implementation of provided interface for getting user autorities
artemy63
pushed a commit
that referenced
this issue
Feb 21, 2022
artemy63
pushed a commit
that referenced
this issue
Feb 21, 2022
…ser management #13 - added example of usage for io.jmix.ldap.userdetails.LdapUserAdditionalRoleProvider#getAdditionalRoles - fix javaDocs - added a possibility to provide additional user roles in case of using active directory configuration
artemy63
pushed a commit
that referenced
this issue
Feb 22, 2022
…ser management (#16) * Obtaining roles from LDAP user attributes should work for in-memory user management #13 - Introduced a new interface that responsible for getting authorities for certain user - Added extension of DefaultLdapAuthoritiesPopulator in order to use implementation of provided interface for getting user autorities - Added a possibility to provide additional user roles in case of using active directory configuration
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
When users are stored in LDAP only (
jmix.ldap.user-details-source = ldap) it's impossible to get roles list from LDAP user attributes. Currently this feature is supported only forjmix.ldap.user-details-source = appbecause it requires to override thegetAdditionalRoles()method ofAbstractLdapUserDetailsSynchronizationStrategy.One of the solutions may be to introduce a new interface. The optional bean implementing this interface will return a list of roles or role codes, e.g.
These roles will be used by both
user-details-source: app and ldap.Maybe we may extend the
org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulatorand implement itsorg.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator#getAdditionalRolesmethod.Do not forget that we have two types of roles: resource and row-level.
The text was updated successfully, but these errors were encountered: