Bug 57442 – Implement global allow filter option

Bug 57442 - Implement global allow filter option


Summary:	Implement global allow filter option

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	AD Connector
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 5.0-8-errata
Assigned To:	Felix Botner
QA Contact:	Julia Bremer

URL:	https://git.knut.univention.de/univen...
Keywords:

Duplicates:	50265 (view as bug list)
Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2024-07-10 11:53 CEST by Felix Botner
Modified:	2024-09-09 09:15 CEST (History)
CC List:	2 users (show)

See Also:	50265
What kind of report is it?:	Development Internal
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Felix Botner

2024-07-10 11:53:51 CEST

As a administrator using the AD connector
I can configure it to only sync a defined set of objects,
so that no further objects are synced automatically without my consent.

Comment 1 Felix Botner

2024-07-16 14:08:58 CEST

* 1a8c1f70 - add global allowfilter
* 1b1abc75 - tests for global allowfilter

Successful build
Package: univention-ad-connector
Version: 14.0.19-3
Branch: 5.0-0
Scope: errata5.0-8

Successful build
Package: ucs-test
Version: 10.0.22-29
Branch: 5.0-0
Scope: errata5.0-8

Comment 2 Julia Bremer

2024-07-29 09:14:07 CEST

OK: Global allowfilter
OK: Cherry-pick to 5.1/5.2
OK: No objects outside the allowfilter are synced 
OK: Moving outside/inside the filter (This behaves a bit weirdly when moving objects outside of the filter, because as soon as one side is outside the filter, the change is not synced anymore. A customer using syncmode must always take care that both sides are in/or outside the filter, because inbetween the sync will not really happen). We document this. 

Verified

Comment 3 Arvid Requate

2024-08-14 16:48:24 CEST

<https://errata.software-univention.de/#/?erratum=5.0x1096>

Comment 4 Jan-Luca Kiok

2024-09-09 09:15:30 CEST

*** Bug 50265 has been marked as a duplicate of this bug. ***