Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: improve LDAP auth auth_roles_mapping #2149

Merged
merged 2 commits into from
Oct 27, 2023
Merged

docs: improve LDAP auth auth_roles_mapping #2149

merged 2 commits into from
Oct 27, 2023

Conversation

dpgaspar
Copy link
Owner

Description

Help for: #1641

Improves LDAP auth docs

ADDITIONAL INFORMATION

  • Has associated issue:
  • Is CRUD MVC related.
  • Is Auth, RBAC security related.
  • Changes the security db schema.
  • Introduces new feature
  • Removes existing feature

@codecov
Copy link

codecov bot commented Oct 25, 2023

Codecov Report

Merging #2149 (ece5901) into master (f591ee5) will decrease coverage by 26.12%.
The diff coverage is n/a.

❗ Current head ece5901 differs from pull request most recent head f8a0a18. Consider uploading reports for the commit f8a0a18 to get more accurate results

@@             Coverage Diff             @@
##           master    #2149       +/-   ##
===========================================
- Coverage   74.50%   48.38%   -26.12%     
===========================================
  Files          72       72               
  Lines        8970     8695      -275     
===========================================
- Hits         6683     4207     -2476     
- Misses       2287     4488     +2201     
Flag Coverage Δ
python 48.38% <ø> (-26.12%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 61 files with indirect coverage changes

Copy link

@eladkal eladkal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

Comment on lines 140 to 141
You can give FlaskAppBuilder roles based on LDAP roles/memberships. (note, this requires AUTH_LDAP_SEARCH to be set)
Note that by default roles will be evaluated based on LDAP memberships.
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Worth also to note that the code looks for exact match of the ldap string. The whole string.
Matching only CN or OU as substring does not work.

@dpgaspar dpgaspar merged commit 515d85f into master Oct 27, 2023
10 checks passed
@dpgaspar dpgaspar deleted the docs/ldap-auth branch October 27, 2023 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants