Subgroups Implementation (from LDAP)

2018-09-05 Thread Benjamin SOULAS
Hi everyone, I m not expert at all in Django so it can be a silly question but I take the risk: I have to implement *LDAP server* (which work perfectly with *django-auth-ldap*, but my question is not related to this library). I was wondering what happens if groups possesses subgroups? Even if

Re: Subgroups Implementation (from LDAP)

2018-09-05 Thread Mike Dewhirst
On 5/09/2018 11:25 PM, Benjamin SOULAS wrote: Hi everyone, I m not expert at all in Django so it can be a silly question but I take the risk: I'm an expert in nothing! What about simplifying things by making your groups have smaller sets of permisssions and putting users into multiple group

Re: Subgroups Implementation (from LDAP)

2018-09-06 Thread Benjamin SOULAS
Hi Mike ! The problem is our app have to be able to retrieve a Customer LDAP server. So we won't be able to know groups will be into the LDAP server. To be concise, when we'll set up the app, we'll have to retrieve the LDAP groups, insert them in django ORM, then make the link (with a table, so

Re: Subgroups Implementation (from LDAP)

2018-09-06 Thread Mike Dewhirst
On 7/09/2018 12:49 AM, Benjamin SOULAS wrote: Hi Mike ! The problem is our app have to be able to retrieve a Customer LDAP server. So we won't be able to know groups will be into the LDAP server. To be concise, when we'll set up the app, we'll have to retrieve the LDAP groups, insert them in

Re: Subgroups Implementation (from LDAP)

2018-09-06 Thread Benjamin SOULAS
Actually, I don't use ldap groups permission really, I have just configured my settings in which AUTH_LDAP_GROUP_SEARCH looks for a posixGroup Type (it is what I use for now, but in the future, it would be logical there will have GroupOfName and other types). My aim is to use django-auth-ldap o

Re: Subgroups Implementation (from LDAP)

2018-09-07 Thread Mike Dewhirst
On 7/09/2018 4:38 PM, Benjamin SOULAS wrote: Actually, I don't use ldap groups permission really, I'm jumping to conclusions here with inadequate evidence. But I'll go ahead anyway. It makes sense to me that your app being different than the ldap system will have no use for ldap permissions.

Re: Subgroups Implementation (from LDAP)

2018-09-07 Thread Benjamin SOULAS
Well indeed, flattening the ldap groups hierarchy could be a solution, but I don't know if my boss will be OK with that, we are still thinking about implementation and explore the techno we need to implement our features. But I think I will keep it in mind seriously, because it could resolve the