LDAP/AD settings unavailable to admin delegates
Open
@come-nc is already working on this.
Since Jul 17, 2023.
0. Needs triage
28-feedback
bug
feature: ldap
feature: settings
- Dominant language
- PHP
- Stars
- 36.9k
- Forks
- 5.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 713
Description
⚠️ This issue respects the following points: ⚠️
- This is a bug, not a question or a configuration/webserver/proxy issue.
- This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
- Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
- I agree to follow Nextcloud's Code of Conduct.
Bug description
Users from group with admin privileges can't access LDAP/AD settings.
This is due to legacy ajax endpoints where it is only checked if the user is an admin but not a subadmin.
Steps to reproduce
- Setup LDAP with an admin
- Give "admin_test" group privileges to edit LDAP/AD settings
- Go to LDAP/AD settings with a user from "admin_test" group
Expected behavior
The user from "admin_test" group is able to see and edit LDAP settings
Installation method
None
Nextcloud Server version
master
Operating system
None
PHP engine version
None
Web server
None
Database engine version
None
Is this bug present after an update or on a fresh install?
None
Are you using the Nextcloud Server Encryption module?
None
What user-backends are you using?
- Default user-backend (database)
- LDAP/ Active Directory
- SSO - SAML
- Other
Configuration report
No response
List of activated Apps
No response
Nextcloud Signing status
No response
Nextcloud Logs
No response
Additional info
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.