You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

61 lines
2.3 KiB

  1. # -*- coding: utf-8 -*-
  2. ##############################################################################
  3. #
  4. # OpenERP, Open Source Management Solution
  5. # This module copyright (C) 2012 Therp BV (<http://therp.nl>).
  6. #
  7. # This program is free software: you can redistribute it and/or modify
  8. # it under the terms of the GNU Affero General Public License as
  9. # published by the Free Software Foundation, either version 3 of the
  10. # License, or (at your option) any later version.
  11. #
  12. # This program is distributed in the hope that it will be useful,
  13. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  14. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  15. # GNU Affero General Public License for more details.
  16. #
  17. # You should have received a copy of the GNU Affero General Public License
  18. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  19. #
  20. ##############################################################################
  21. {
  22. "name": "Groups assignment",
  23. "version": "1.2",
  24. "depends": ["auth_ldap"],
  25. "author": "Therp BV",
  26. "description": """
  27. Adds user accounts to groups based on rules defined by the administrator.
  28. Usage:
  29. Define mappings in Settings->Companies->[your company]->tab configuration->[your
  30. ldap server].
  31. Decide whether you want only groups mapped from ldap (Only ldap groups=y) or a
  32. mix of manually set groups and ldap groups (Only ldap groups=n). Setting this to
  33. 'no' will result in users never losing privileges when you remove them from a
  34. ldap group, so that's a potential security issue. It is still the default to
  35. prevent losing group information by accident.
  36. For active directory, use LDAP attribute 'memberOf' and operator 'contains'.
  37. Fill in the DN of the windows group as value and choose an OpenERP group users
  38. with this windows group are to be assigned to.
  39. For posix accounts, use operator 'query' and a value like
  40. (&(cn=bzr)(objectClass=posixGroup)(memberUid=$uid))
  41. The operator query matches if the filter in value returns something, and value
  42. can contain $[attribute] which will be replaced by the first value of the
  43. user's ldap record's attribute named [attribute].
  44. """,
  45. "category": "Tools",
  46. "data": [
  47. 'users_ldap_groups.xml',
  48. 'security/ir.model.access.csv',
  49. ],
  50. "installable": True,
  51. "external_dependencies": {
  52. 'python': ['ldap'],
  53. },
  54. }