mirror of
https://github.com/cwinfo/powerdns-admin.git
synced 2024-11-08 14:40:27 +00:00
Merge pull request #1205 from joshsol1/master
Modification to SAML groups and group management
This commit is contained in:
commit
83d2f3c791
@ -113,6 +113,14 @@ SAML_ENABLED = False
|
||||
# ### the user is set as a non-administrator user.
|
||||
# #SAML_ATTRIBUTE_ADMIN = 'https://example.edu/pdns-admin'
|
||||
|
||||
## Attribute to get admin status for groups with the IdP
|
||||
# ### Default: Don't set administrator group with SAML attributes
|
||||
#SAML_GROUP_ADMIN_NAME = 'GroupName'
|
||||
|
||||
## Attribute to get operator status for groups with the IdP
|
||||
# ### Default: Don't set operator group with SAML attributes
|
||||
#SAML_GROUP_OPERATOR_NAME = 'GroupName'
|
||||
|
||||
# ## Attribute to get account names from
|
||||
# ### Default: Don't control accounts with SAML attribute
|
||||
# ### If set, the user will be added and removed from accounts to match
|
||||
|
@ -1008,6 +1008,8 @@ def saml_authorized():
|
||||
None)
|
||||
admin_group_name = current_app.config.get('SAML_GROUP_ADMIN_NAME',
|
||||
None)
|
||||
operator_group_name = current_app.config.get('SAML_GROUP_OPERATOR_NAME',
|
||||
None)
|
||||
group_to_account_mapping = create_group_to_account_mapping()
|
||||
|
||||
if email_attribute_name in session['samlUserdata']:
|
||||
@ -1061,6 +1063,8 @@ def saml_authorized():
|
||||
uplift_to_admin(user)
|
||||
elif admin_group_name in user_groups:
|
||||
uplift_to_admin(user)
|
||||
elif operator_group_name in user_groups:
|
||||
uplift_to_operator(user)
|
||||
elif admin_attribute_name or group_attribute_name:
|
||||
if user.role.name != 'User':
|
||||
user.role_id = Role.query.filter_by(name='User').first().id
|
||||
@ -1117,6 +1121,14 @@ def uplift_to_admin(user):
|
||||
created_by='SAML Assertion')
|
||||
history.add()
|
||||
|
||||
def uplift_to_operator(user):
|
||||
if user.role.name != 'Operator':
|
||||
user.role_id = Role.query.filter_by(name='Operator').first().id
|
||||
history = History(msg='Promoting {0} to operator'.format(
|
||||
user.username),
|
||||
created_by='SAML Assertion')
|
||||
history.add()
|
||||
|
||||
|
||||
@index_bp.route('/saml/sls')
|
||||
def saml_logout():
|
||||
|
Loading…
Reference in New Issue
Block a user