Bug 48647 - Add ucsschoolRole to OU-specific groups (fixup for new schools)
Add ucsschoolRole to OU-specific groups (fixup for new schools)
Status: CLOSED FIXED
Product: UCS@school
Classification: Unclassified
Component: Ucsschool-lib
UCS@school 4.4
Other Linux
: P5 normal (vote)
: UCS@school 4.4 v1
Assigned To: Jürn Brodersen
Daniel Tröder
:
Depends on: 48226 48252
Blocks: 48648
  Show dependency treegraph
 
Reported: 2019-02-11 16:53 CET by Jürn Brodersen
Modified: 2019-03-12 10:58 CET (History)
0 users

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: 2: Improvement: Would be a product improvement
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 1: Nuisance – not a big deal but noticeable
User Pain: 0.023
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jürn Brodersen univentionstaff 2019-02-11 16:53:38 CET
Looks like I forgot to check the creation of a new school in bug 48226 :(

This needs some additional changes

+++ This bug was initially created as a clone of Bug #48252 +++

OU-specific groups in UCS@school such as Domain Users <OU>, admins-<OU>, mitarbeiter-<OU>, lehrer-<OU> and schueler-<OU> should be considered ucsschoolGroups and have a ucsschoolRole attribute as well as classes and workgroups imho.
Comment 1 Jürn Brodersen univentionstaff 2019-02-11 17:02:22 CET
[4.4 2054c42de] Bug #48647: Enable roles for groups and fix group roles for new schools

Package: ucs-school-lib
Version: 12.1.0-4A~4.4.0.201902111700
Branch: ucs_4.4-0
Scope: ucs-school-4.4
Comment 2 Jürn Brodersen univentionstaff 2019-02-11 18:57:27 CET
[4.4 7d19223ed] Bug #48647: fix roles for admin group
Comment 3 Daniel Tröder univentionstaff 2019-02-12 17:44:52 CET
OK: manual test:

--------------------------------------------------------------------------
root@m65:~# /usr/share/ucs-school-import/scripts/create_ou newou
--------------------------------------------------------------------------
root@m65:~# univention-ldapsearch -LLL 'cn=*-newou*' ucsschoolRole

dn: cn=admins-newou,cn=ouadmins,cn=groups,dc=uni,dc=dtr
ucsschoolRole: school_admin_group:school:newou

dn: cn=schueler-newou,cn=groups,ou=newou,dc=uni,dc=dtr
ucsschoolRole: school_student_group:school:newou

dn: cn=lehrer-newou,cn=groups,ou=newou,dc=uni,dc=dtr
ucsschoolRole: school_teacher_group:school:newou

dn: cn=mitarbeiter-newou,cn=groups,ou=newou,dc=uni,dc=dtr
ucsschoolRole: school_staff_group:school:newou
--------------------------------------------------------------------------
root@m65:~# univention-ldapsearch -LLL 'cn=Domain Users newou' ucsschoolRole

dn: cn=Domain Users newou,cn=groups,ou=newou,dc=uni,dc=dtr
ucsschoolRole: school_domain_group:school:newou
--------------------------------------------------------------------------

REOPEN: see gitlab comment about MRO
Comment 4 Jürn Brodersen univentionstaff 2019-02-13 14:04:31 CET
Switched RoleSupportMixin.

Added a BasicSchoolGroup which is just a BasicGroup but with the school attribute re-enabled, which is needed for the admins-$OU groups. Otherwise no role would be set for the admin group.

[4.4 868160ce2] Bug #48647: Add a new BasicSchoolGroup which supports the school attribute
Comment 5 Daniel Tröder univentionstaff 2019-02-13 15:07:15 CET
[4.4] 2fe18a558 Bug #48647: advisory update
Comment 6 Sönke Schwardt-Krummrich univentionstaff 2019-03-12 10:58:36 CET
UCS@school 4.4 v1 has been released.

https://docs.software-univention.de/release-notes-ucsschool-4.4v1-de.html

If this error occurs again, please clone this bug.