15308555518/ seafile-admin-docs
1
0
Fork 0
mirror of https://github.com/haiwen/seafile-admin-docs.git synced 2025-12-26 02:32:50 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Merge pull request #310 from haiwen/add-ldap_role_list_mapping
Some checks failed
Deploy CI / deploy (push) Has been cancelled
Details 

add ldap_role_list_mapping
This commit is contained in:
Daniel Pan 2024-07-24 11:40:26 +08:00 committed by GitHub
parent b8f6d86eff 58fff766a3
commit edc52df908
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 19 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
manual/deploy_pro/ldap_in_11.0.md
View File

@ -407,12 +407,13 @@ To enable this feature, add below option to `seahub_settings.py`, e.g.
LDAP_USER_ROLE_ATTR = 'title'
```
`LDAP_USER_ROLE_ATTR` is the attribute field to configure roles in LDAP. We provide a user-defined function to map the role：Create `custom_functions.py` under conf/ and edit it like:
`LDAP_USER_ROLE_ATTR` is the attribute field to configure roles in LDAP. You can write a custom function to map the role by creating a file `custom_functions.py` under conf/ and edit it like:
```python
# -*- coding: utf-8 -*-
# The AD roles attribute returns a list of roles (role_list).
# The following function use the first entry in the list.
def ldap_role_mapping(role):
if 'staff' in role:
return 'Staff'
@ -420,6 +421,21 @@ def ldap_role_mapping(role):
return 'Guest'
if 'manager' in role:
return 'Manager'
# From version 11.0.11-pro, you can define the following function
# to calculate a role from the role_list.
def ldap_role_list_mapping(role_list):
if not role_list:
return ''
for role in role_list:
if 'staff' in role:
return 'Staff'
if 'guest' in role:
return 'Guest'
if 'manager' in role:
return 'Manager'
```
You can rewrite this function (in python) to make your own mapping rules. If the file or function doesn't exist, all roles in `LDAP_USER_ROLE_ATTR` will be synced.
Note: You should only define one of the two functions.
You can rewrite the function (in python) to make your own mapping rules. If the file or function doesn't exist, the first entry in role_list will be synced.