[EMAIL PROTECTED] a écrit :
> 
> Hello,
> 
> I would like to know if it's possible to have virtual groups in Nuxeo.
> 
> For example, I have a field "department" in the user schema in LDAP. Is
> it possible to automatically assign a virtual department group to a user ?

As of 5.1.2, if you LDAP server has a schema defining the "groupOfURLs"
objectClass, you can create can create for each department a new dynamic group
(deriving from that objectClass) named "department1" for instance with the
following attribute:

 memberURL: 
ldap:///ou=people,dc=example,dc=com??subtree?(department=department1)

Then you will have to configure the LDAPReference to resolve that attribute as a
dynamic reference:

        <ldapReference field="members" directory="userDirectory"
          staticAttributeId="uniqueMember"
          dynamicAttributeId="memberURL" />

Please have a look at the extension point documentation for more details with a
sample configuration of the LDAP directories that uses dynamic group resolution:

http://svn.nuxeo.org/nxpointdoc/org.nuxeo.ecm.directory.ldap.LDAPDirectoryFactory.html

You should also have a look at the nuxeo-platform-directory-ldap tests and their
configuration, especially, for instance look at the sample dynamic groups used
in the tests:

http://svn.nuxeo.org/trac/nuxeo/browser/org.nuxeo.ecm.platform/trunk/nuxeo-platform-directory-ldap/src/test/resources/sample-dynamic-groups.ldif

-- 
Olivier

_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm

Reply via email to