getsentry-ldap-auth icon indicating copy to clipboard operation
getsentry-ldap-auth copied to clipboard

Update sentry user role if LDAP group membership is changed

Open viteksafronov opened this issue 5 years ago • 1 comments

This backend checks for user's group only if the user is not yet a member of an organization. So if the membership was changed in LDAP, Sentry won't know about it leaving the user with same role as it was on create step. I'd like to manage users roles via LDAP and be sure the Sentry will reflect these changes as well.

viteksafronov avatar Dec 01 '19 09:12 viteksafronov

I also think this behavior is contrary to parent option https://django-auth-ldap.readthedocs.io/en/latest/reference.html#std:setting-AUTH_LDAP_ALWAYS_UPDATE_USER, so we probably should respect it too, to update existing membership if the option is set to true (or we could have a separate option for that)

viteksafronov avatar Dec 01 '19 12:12 viteksafronov