Bug 41014

Summary:	Add extended options / attributes for UCS@school user roles
Product:	UCS@school	Reporter:	Florian Best <best>
Component:	General	Assignee:	Florian Best <best>
Status:	CLOSED FIXED	QA Contact:	Daniel Tröder <troeder>
Severity:	normal
Priority:	P5	CC:	schwardt
Version:	UCS@school 4.1
Target Milestone:	UCS@school 4.1 R2
Hardware:	Other
OS:	Linux
See Also:	https://forge.univention.org/bugzilla/show_bug.cgi?id=41008
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:
Bug Depends on:	41017, 41290
Bug Blocks:

Description Florian Best

2016-04-07 07:02:24 CEST

Bug #41008 introduced object classes for user roles and an attribute which specifies the OUs the user belongs to.

For each object class an extended option should be added to users/user.
For the attribute ucsschoolSchool a extended attribute should be added.
The attribute needs a dynamic syntax class which contains every UCS@school OU (objectClass=ucsschoolOrganizationalUnit) and present them as a dropdown.

Comment 1 Florian Best

2016-04-26 15:35:34 CEST

The options should be read-only (not modifiable afterwards). Invalid combinations should currently be prevented.

Comment 2 Florian Best

2016-05-25 17:30:18 CEST

The following extended attributes/options have been added:
dn: cn=ucsschoolStudent,cn=UCSschool,cn=custom attributes,cn=univention
dn: cn=ucsschoolTeacher,cn=UCSschool,cn=custom attributes,cn=univention
dn: cn=ucsschoolStaff,cn=UCSschool,cn=custom attributes,cn=univention
dn: cn=ucsschoolAdministrator,cn=UCSschool,cn=custom attributes,cn=univention
dn: cn=UCSschool-Schools,cn=UCSschool,cn=custom attributes,cn=univention
→ the extended attribute uses the abstract object class "ucsschoolType" and requires one of the above options which contain the concrete object class.

(In reply to Florian Best from comment #1)
> The options should be read-only (not modifiable afterwards).
→ has been implemented

> Invalid combinations should currently be prevented.
→Bug #41351

Comment 3 Daniel Tröder

2016-07-05 11:15:25 CEST

* "Examuser" (ucsschoolExam) was added as an option too.
* Options are now editable (to be able to make a teacher an admin).
OK: join script
OK: ldap schema
OK: manual test:
  * enabling and disabling Option in UMC and
  * running User.from_dn().is_teacher() and User.from_dn().is_staff()
  → results match Options-setting in UMC

Comment 4 Florian Best

2016-07-05 11:58:25 CEST

UCS@school 4.1 R2 has been released:
http://docs.software-univention.de/release-notes-ucsschool-4.1R2v1-de.pdf

If this error occurs again, please use "Clone This Bug".