Page MenuHomePhorge

Authorization filters for collaborative editing
Closed, ResolvedPublic

Description

Roles as described in T721

Acme Corp has kolab users that are emplyees as well as external contractors. only employees should have access to collaborative editing.

Details

Ticket Type
Story

Event Timeline

petersen raised the priority of this task from to 60.
petersen updated the task description. (Show Details)
petersen changed Ticket Type from Task to Story.
petersen added a parent task: Restricted Maniphest Task.
petersen added subscribers: petersen, vanmeeuwen.
vanmeeuwen removed a parent task: Restricted Maniphest Task.Sep 11 2015, 12:28 PM
machniak claimed this task.
machniak subscribed.

As Chwala uses kolab_auth plugin we can use kolab_auth_role_settings option for this. E.g.:

$config['kolab_auth_role_settings'] = array(
    'cn=contractor,%dc' => array(
        'fileapi_manticore' => array(
            'value' => null,
        ),
    ), 
);

The above should disable Manticore for users with specified role.

Note that also kolab_files_user_filter may need to be modified to skip "contractors" from searching editing session invitees.