Bug 54436 - Portal: "Can only be seen by these groups" should support an LDAP-Filter
Portal: "Can only be seen by these groups" should support an LDAP-Filter
Status: NEW
Product: UCS
Classification: Unclassified
Component: Portal
UCS 5.0
Other Windows NT
: P5 normal (vote)
: ---
Assigned To: UMC maintainers
UMC maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2022-02-09 14:20 CET by Michael Grandjean
Modified: 2022-09-30 10:36 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Grandjean univentionstaff 2022-02-09 14:20:00 CET
In most cases, selecting single groups for the "Can only be seen by these groups" option at a portal entry is probably fine.

However, there are environments that are quite large and dynamic. Imagine we are a large UCS@school installation with several hundred schools and we are onboarding a couple of schools per week (or even offboarding some).
It would be great if "Can only be seen by these groups" could also be dynamic, like with an (optional) LDAP-filter instead of a fixed list of groups, e.g. '(|(ucsschoolRole=school_teacher_group:school:*)(ucsschoolRole=school_admin_group:school:*))' for all teachers and schooladmins.

Current workaround in projects is to build a listener module that adds the wanted groups to the portal entry, but that is kinda hacky and not accessible to most customers.