LDAP - RBAC #926

New issue

Open

opened 2026-03-04 11:20:03 -05:00 by deekerman · 0 comments

deekerman commented

2026-03-04 11:20:03 -05:00

Owner

Originally created by @linux-cdc on GitHub (May 28, 2025).

Originally assigned to: @HocKu7, @yagudin10, @EvgeniaBzzz on GitHub.

Ref: LDAP integration improvements #2715

Cloubeaver 25.0.5 support LDAP Authentication, but no authorization (RBAC).
No authorization (roles) can automatically be assigned based on the LDAP group the user is memberof.

When authenticated for the 1st time, a user should be granted for some authorizations, which can be done by assigning them to a group (user, admin or a custom local group).
Creating local group and assigning permissions (roles) can done manually inside web interface.

Describe the solution you'd like

use ldap group as teams : can LDAP/Teams group mappings be supported/implemented.
use LDAP group (using CN/sAMAccountName) to grant his members on some ressources.
optionally: mapped user/group/roles via conf files.

Originally created by @linux-cdc on GitHub (May 28, 2025). Originally assigned to: @HocKu7, @yagudin10, @EvgeniaBzzz on GitHub. Ref: LDAP integration improvements #2715 Cloubeaver 25.0.5 support LDAP Authentication, but **no authorization (RBAC)**. No authorization (roles) can automatically be assigned based on the LDAP group the user is memberof. When authenticated for the 1st time, a user should be granted for some authorizations, which can be done by assigning them to a group (user, admin or a custom local group). Creating local group and assigning permissions (roles) can done manually inside web interface. **Describe the solution you'd like** 1. use ldap group as teams : can LDAP/Teams group mappings be supported/implemented. 2. use LDAP group (using CN/sAMAccountName) to grant his members on some ressources. 3. optionally: mapped user/group/roles via conf files.