moebiusbandandClaude Opus 4.8 63a82d022b feat(auth): assign elevated LDAP roles via configurable filters ...

The LDAP sync only ever granted the base "user" role. Add an optional
auth.ldap.role-filters map (role -> LDAP filter) so accounts matching a
filter are granted that elevated role (admin/support/api/manager).

LDAP is authoritative for the configured roles: sync both adds and removes
them to match group membership, while roles not listed (e.g. a manually
granted manager) are preserved. A managed manager that still has assigned
projects is never stripped. With no role-filters configured behaviour is
identical to before.

Roles are reconciled during periodic sync and at login. Sync evaluates
each filter once over the whole base (one search per role, not per user)
and reconciles existing users via a single ListUsers lookup plus the new
UserRepository.UpdateRoles helper.

Closes #74

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Entire-Checkpoint: e38526c3259d

2026-06-19 06:36:55 +02:00

..

migrations/sqlite3

feat: replace gorilla/sessions with alexedwards/scs/v2

2026-06-17 07:54:26 +02:00

testdata

Switch to cc-lib v2

2025-12-24 09:24:18 +01:00

config.go

Run gofumpt

2026-03-30 16:49:27 +02:00

dbConnection.go

Reduce insert pressure in db. Increase sqlite timeout value

2026-03-16 11:17:47 +01:00

hooks_test.go

Improve documentation and add more tests

2026-01-15 06:41:23 +01:00

hooks.go

Update dependencies. Rebuild graphql and swagger

2026-01-15 08:32:06 +01:00

job_test.go

Allow finer control for omit tagged jobs in retention policies

2026-02-23 08:46:47 +01:00

job.go

Make log in scanRow more descriptive. No log for common no rows error

2026-03-16 20:03:27 +01:00

jobCreate_test.go

Fix more bugs related to job_cache ids used in job table

2026-02-20 09:20:18 +01:00

jobCreate.go

Wrap SyncJobs in transaction

2026-03-16 11:25:49 +01:00

jobFind.go

fix: Large heap allocations in sqlite driver. Sanitize sqlite config and make it configurablex. Allow to cancel queries.

2026-03-11 11:14:37 +01:00

jobHooks.go

Update dependencies. Rebuild graphql and swagger

2026-01-15 08:32:06 +01:00

jobQuery.go

Fix medium-severity issues from follow-up security audit

2026-06-04 20:08:41 +02:00

migration.go

feat: replace gorilla/sessions with alexedwards/scs/v2

2026-06-17 07:54:26 +02:00

node_test.go

Extend node repository unit tests

2026-02-12 09:30:14 +01:00

node.go

change: remove heuristic metricHealth, replace with DB metricHealth

2026-03-19 15:55:58 +01:00

repository_test.go

Create copy of test db before unit tests

2026-02-10 07:53:30 +01:00

stats_test.go

Make stats query selective. Add stats index. Add paging to user list.

2026-03-12 20:16:55 +01:00

stats.go

Fix critical issues from follow-up security audit

2026-06-04 19:07:20 +02:00

tags.go

Fix medium-severity issues from follow-up security audit

2026-06-04 20:08:41 +02:00

transaction_test.go

Run go fix

2026-02-17 21:04:17 +01:00

transaction.go

Run go fix

2026-02-17 21:04:17 +01:00

user_test.go

Improve documentation and add more tests

2026-01-15 06:41:23 +01:00

user.go

feat(auth): assign elevated LDAP roles via configurable filters

2026-06-19 06:36:55 +02:00

userConfig_test.go

Create copy of test db before unit tests

2026-02-10 07:53:30 +01:00

userConfig.go

Switch to cc-lib v2

2025-12-24 09:24:18 +01:00