Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[16.0][MIG] users_ldap_groups: Migration to version 16.0 #554

Merged
merged 29 commits into from
Sep 25, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
29 commits
Select commit Hold shift + click to select a range
e11fe64
Therp's modules to sync OpenERP with LDAP directories
dreispt Jul 23, 2013
9cdba8e
FIX version numbers; view type is deprecated
dreispt Jul 24, 2013
5d12ba7
Generate .pot files
Mar 14, 2014
cbee4a6
Write needs list to browse.
yajo Apr 8, 2014
304ea26
move all modules to __unported__ on master branch and set installable…
sbidoul Jul 12, 2014
a7de9ae
start moving the users_ldap_groups outside the __unported__ folder
giacomos85 Jul 16, 2015
b397e38
porting to v8
giacomos85 Jul 16, 2015
be85afe
move to new apis
giacomos85 Jul 16, 2015
4834b56
fix missing new api call
giacomos85 Jul 16, 2015
fff1ae4
some makeup and change the ldap operators from plain python objects t…
giacomos85 Jul 16, 2015
e77e225
use AbstractModel instead of TransientModel so we don't create useles…
giacomos85 Jul 17, 2015
ea0ac05
change description with summary to have the following sentence show u…
giacomos85 Jul 17, 2015
031274e
Add missing default oca icons
yvaucher Aug 18, 2015
2896e3a
[UPD] prefix versions with 8.0
sbidoul Oct 9, 2015
65ebd0b
[MIG] Make modules uninstallable
pedrobaeza Oct 14, 2015
6093acb
[MIG] Rename manifest files
pedrobaeza Oct 6, 2016
3536d0f
[MIG] users_ldap_groups
hbrunn Feb 5, 2018
e70859d
remove obsolete .pot files [ci skip]
sbidoul Jun 15, 2018
ad15e3a
[MIG] users_ldap_groups: Migration to 12.0
alexey-pelykh Nov 9, 2018
adf991a
Added translation using Weblate (Croatian)
badbole Nov 13, 2019
4501d8a
[UPD] Brainbean Apps => CorporateHub
alexey-pelykh Nov 4, 2020
6791696
[IMP] users_ldap_groups: black, isort, prettier
joao-p-marques Feb 16, 2021
b79e123
[MIG] users_ldap_groups: Migration to 13.0
joao-p-marques Feb 17, 2021
11ba895
[IMP] users_ldap_groups: Check and warn about wrong user config
joao-p-marques Feb 19, 2021
0351110
[IMP] users_ldap_groups: Black, Isort, Prettier.
dsolanki-initos Mar 15, 2021
ff65bc7
[MIG] Migrate module users_ldap_groups to v14.
dsolanki-initos Mar 15, 2021
8622bda
[MIG] users_ldap_groups: Migration to 15.0
ortlam Dec 21, 2022
08fd51d
[IMP] users_ldap_groups: pre-commit stuff
carolinafernandez-tecnativa Sep 22, 2023
0947c6b
[MIG] users_ldap_groups: Migration to 16.0
carolinafernandez-tecnativa Sep 22, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions setup/users_ldap_groups/odoo/addons/users_ldap_groups
6 changes: 6 additions & 0 deletions setup/users_ldap_groups/setup.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
import setuptools

setuptools.setup(
setup_requires=['setuptools-odoo'],
odoo_addon=True,
)
108 changes: 108 additions & 0 deletions users_ldap_groups/README.rst
Original file line number Diff line number Diff line change
@@ -0,0 +1,108 @@
======================
LDAP groups assignment
======================

..
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! This file is generated by oca-gen-addon-readme !!
!! changes will be overwritten. !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! source digest: sha256:078a6ff3b7932f9af4da1b3af63e6b503dfbdb5026b3bbdcfee95372995c3ae2
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
:target: https://odoo-community.org/page/development-status
:alt: Beta
.. |badge2| image:: https://img.shields.io/badge/licence-AGPL--3-blue.png
:target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
:alt: License: AGPL-3
.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fserver--auth-lightgray.png?logo=github
:target: https://github.com/OCA/server-auth/tree/15.0/users_ldap_groups
:alt: OCA/server-auth
.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
:target: https://translation.odoo-community.org/projects/server-auth-15-0/server-auth-15-0-users_ldap_groups
:alt: Translate me on Weblate
.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
:target: https://runboat.odoo-community.org/builds?repo=OCA/server-auth&target_branch=15.0
:alt: Try me on Runboat

|badge1| |badge2| |badge3| |badge4| |badge5|

.. image:: https://img.shields.io/badge/license-AGPL--3-blue.png
:target: https://www.gnu.org/licenses/agpl
:alt: License: AGPL-3

Adds user accounts to groups based on rules defined by the administrator.

**Table of contents**

.. contents::
:local:

Usage
=====

Define mappings in Settings / General Settings / Integrations / LDAP Authentication / LDAP Server

Decide whether you want only groups mapped from LDAP (`Only LDAP groups` checked) or a mix of manually set groups and LDAP groups (`Only LDAP groups` unchecked).
Setting this to "no" will result in users never losing privileges when you remove them from a LDAP group, so that's a potential security issue.
It is still the default to prevent losing group information by accident.
If set to "Yes", you need to make sure each user has at least on of the "User types" groups

For active directory, use LDAP attribute 'memberOf' and operator 'contains'. Fill in the DN of the windows group as value and choose an Odoo group users with this windows group are to be assigned to.

For posix accounts, use operator 'query' and a value like::

(&(cn=bzr)(objectClass=posixGroup)(memberUid=$uid))

The operator query matches if the filter in value returns something, and value
can contain ``$attribute`` which will be replaced by the first value of the
user's LDAP record's attribute named `attribute`.

Bug Tracker
===========

Bugs are tracked on `GitHub Issues <https://github.com/OCA/server-auth/issues>`_.
In case of trouble, please check there if your issue has already been reported.
If you spotted it first, help us to smash it by providing a detailed and welcomed
`feedback <https://github.com/OCA/server-auth/issues/new?body=module:%20users_ldap_groups%0Aversion:%2015.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.

Do not contact contributors directly about support or help with technical issues.

Credits
=======

Authors
~~~~~~~

* Therp BV

Contributors
~~~~~~~~~~~~

* Holger Brunn <hbrunn@therp.nl>
* Giacomo Spettoli <giacomo.spettoli@gmail.com>
* `CorporateHub <https://corporatehub.eu/>`__

* Alexey Pelykh <alexey.pelykh@corphub.eu>
* Tecnativa <https://www.tecnativa.com>

* João Marques
* Dhara Solanki <dhara.solanki@initos.com>

Maintainers
~~~~~~~~~~~

This module is maintained by the OCA.

.. image:: https://odoo-community.org/logo.png
:alt: Odoo Community Association
:target: https://odoo-community.org

OCA, or the Odoo Community Association, is a nonprofit organization whose
mission is to support the collaborative development of Odoo features and
promote its widespread use.

This module is part of the `OCA/server-auth <https://github.com/OCA/server-auth/tree/15.0/users_ldap_groups>`_ project on GitHub.

You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.
3 changes: 3 additions & 0 deletions users_ldap_groups/__init__.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
# Copyright 2012-2018 Therp BV <https://therp.nl>
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl.html).
from . import models
18 changes: 18 additions & 0 deletions users_ldap_groups/__manifest__.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# Copyright 2012-2018 Therp BV <https://therp.nl>
# Copyright 2018 Brainbean Apps <https://brainbeanapps.com>
# Copyright 2021 Tecnativa - João Marques
# Copyright 2023 Tecnativa - Carolina Fernandez
# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl.html).
{
"name": "LDAP groups assignment",
"version": "16.0.1.0.0",
"depends": ["auth_ldap"],
"author": "Therp BV, " "Odoo Community Association (OCA)",
"website": "https://github.com/OCA/server-auth",
"license": "AGPL-3",
"summary": "Adds user accounts to groups based on rules defined "
"by the administrator.",
"category": "Authentication",
"data": ["views/res_company_ldap_views.xml", "security/ir.model.access.csv"],
"external_dependencies": {"python": ["python-ldap"]},
}
162 changes: 162 additions & 0 deletions users_ldap_groups/i18n/de.po
Original file line number Diff line number Diff line change
@@ -0,0 +1,162 @@
# Translation of Odoo Server.
# This file contains the translation of the following modules:
# * users_ldap_groups
#
# Translators:
msgid ""
msgstr ""
"Project-Id-Version: server-tools (8.0)\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2015-09-29 11:14+0000\n"
"PO-Revision-Date: 2015-09-18 13:56+0000\n"
"Last-Translator: <>\n"
"Language-Team: German (http://www.transifex.com/oca/OCA-server-tools-8-0/"
"language/de/)\n"
"Language: de\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: \n"
"Plural-Forms: nplurals=2; plural=(n != 1);\n"

#. module: users_ldap_groups
#: model:ir.model,name:users_ldap_groups.model_res_company_ldap
msgid "Company LDAP configuration"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__create_uid
msgid "Created by"
msgstr "Erstellt von"

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__create_date
msgid "Created on"
msgstr "Erstellt am:"

#. module: users_ldap_groups
#: model:ir.model.fields,help:users_ldap_groups.field_res_company_ldap__group_mapping_ids
msgid "Define how Odoo groups are assigned to LDAP users"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model,name:users_ldap_groups.model_res_company_ldap_operator
msgid "Definition op LDAP operations"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__display_name
msgid "Display Name"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap__group_mapping_ids
msgid "Group mappings"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__id
msgid "ID"
msgstr "ID"

#. module: users_ldap_groups
#: model:ir.model.fields,help:users_ldap_groups.field_res_company_ldap__only_ldap_groups
msgid ""
"If this is checked, manual changes to group membership are undone on every "
"login (so Odoo groups are always synchronous with LDAP groups). If not, "
"manually added groups are preserved."
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__ldap_attribute
msgid "LDAP attribute"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model,name:users_ldap_groups.model_res_company_ldap_group_mapping
msgid "LDAP group mapping"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__ldap_id
msgid "LDAP server"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping____last_update
#, fuzzy
msgid "Last Modified on"
msgstr "Zuletzt aktualisiert am"

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__write_uid
msgid "Last Updated by"
msgstr "Zuletzt aktualisiert von"

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__write_date
msgid "Last Updated on"
msgstr "Zuletzt aktualisiert am"

#. module: users_ldap_groups
#: model_terms:ir.ui.view,arch_db:users_ldap_groups.view_ldap_installer_form
msgid "Map User Groups"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__group_id
msgid "Odoo group"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap__only_ldap_groups
msgid "Only LDAP groups"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__operator
msgid "Operator"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,help:users_ldap_groups.field_res_company_ldap_group_mapping__ldap_attribute
msgid ""
"The LDAP attribute to check.\n"
"For active directory, use memberOf."
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,help:users_ldap_groups.field_res_company_ldap_group_mapping__group_id
msgid "The Odoo group to assign"
msgstr ""

#. module: users_ldap_groups
#: code:addons/users_ldap_groups/models/res_company_ldap.py:0
#, python-format
msgid ""
"The created user needs to have one (and only one) of the 'User types /' "
"groups defined."
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,help:users_ldap_groups.field_res_company_ldap_group_mapping__operator
msgid ""
"The operator to check the attribute against the value\n"
"For active directory, use 'contains'"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,help:users_ldap_groups.field_res_company_ldap_group_mapping__value
msgid ""
"The value to check the attribute against.\n"
"For active directory, use the dn of the desired group"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model,name:users_ldap_groups.model_res_users
msgid "Users"
msgstr ""

#. module: users_ldap_groups
#: model:ir.model.fields,field_description:users_ldap_groups.field_res_company_ldap_group_mapping__value
msgid "Value"
msgstr ""
Loading
Loading