mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-25 11:19:39 +03:00
When I try to add an LDAP user as admin, the permissions do not save. #4842
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @silvaguilherme on GitHub (Jul 2, 2024).
Attempted Debugging
Searched GitHub Issues
Describe the Scenario
When I try to add an LDAP user as admin, the permissions do not save.
I change the .env (AUTH_METHOD=standard), then as admin.
I add my LDAP user as admin and save the page.
But when the user connects the application he loses the permissions.
In my tests, the user only loses permission when logging into the application.
If I grant him permission, and he is logged in, he has admin permission until he logs out
Exact BookStack Version
v24.05.2
Log Content
No response
Hosting Environment
Oracle Linux
@ssddanbrown commented on GitHub (Jul 2, 2024):
Hi @silvaguilherme,
I'm guessing you have the following option and values set:
In which case I'd expect the user to lose their admin role upon login unless this was mapping to a group in the LDAP system. If you intend for role assignments to remain, and not be removed by the LDAP group sync handling, you should set
LDAP_REMOVE_FROM_GROUPStofalse.@silvaguilherme commented on GitHub (Jul 2, 2024):
It worked
Thanks
@ssddanbrown commented on GitHub (Jul 2, 2024):
Good to hear! Will therefore close this off.