[Kolab-devel] [issue272] modify user is not really group specific

[Martin Konold]

New submission from Martin Konold <martin.konold at erfrakon.de>:

user.php is not group specific it displays to many editable fields.  
Some of them are later thrown away: 
if ($auth->group() == "user") { 
  unset($ldap_object['sn']); 
  unset($ldap_object['cn']); 
  unset($ldap_object['mail']); 
} 
This is bad maintainance and usability wise. 
 
I see two potential solutions: 
 
o clean solution 
- check LDAP for write permissions and only offer an editable field for 
attribute values where user really has write permissions. 
 
o alternative solution (with extra redundancy) 
- provide in the php code a mean to easily define which values are editable for 
which groups. E.g. something comparable to the current validation hash. 
                         }

----------
assignedto: steffen
messages: 990
nosy: bernhard, martin, steffen
priority: urgent
status: unread
title: modify user is not really group specific
________________________________________________
Kolab issue tracker <kolab-issues at intevation.de>
<https://intevation.de/roundup/kolab/issue272>
________________________________________________