Issue 275: show group membership when group comes from LDAP
Status:  Released
Owner:
Closed:  Oct 2012
Reported by code-rev...@gtempaccount.com, Sep 24, 2009
Reported by Eric Tsai <erictsai@erictsai.tw> on Mon Aug 31 08:12:41 PDT 2009
Source: JIRA GERRIT-276
Affected Version: 2.0.19.2

I think if Gerrit can show the members of a automatic_membership='Y' group on
the web page will be great to check the correctness of the settings.
Sep 24, 2009
#1 code-rev...@gtempaccount.com
Comment by Shawn Pearce <sop@google.com> on Mon Aug 31 08:15:08 PDT 2009

My only concern here is some groups in LDAP can be very large, and the group
contents may be a superset of the users with Gerrit accounts.  In particular
think of an organization which has thousands of employees, all of which are in
a single "active-employees" group, and that group is mapped into Gerrit.
Showing the group contents in the web UI could take a lot of time to download
and display, and its doubtful that list would really help you validate the
binding.

It might instead be better to just query for the group in LDAP, and show a
handful of properties from it, like dn and description.
Sep 24, 2009
#2 code-rev...@gtempaccount.com
Comment by Eric Tsai <erictsai@erictsai.tw> on Mon Aug 31 08:36:21 PDT 2009

Agree. I think I just need make sure that Gerrit has found the correct group
object.
The "member=" part wouldn't be a big problem.
So showing some properties of the group object is acceptable.
Sep 24, 2009
#3 code-rev...@gtempaccount.com
Comment by Eric Tsai <erictsai@erictsai.tw> on Thu Sep 03 04:25:29 PDT 2009

Adding a group membership page in user's settings page seems to be a more
feasible way.
Thus Gerrit just need to do some search in the memory.
And I can use DEVELOPMENT_BECOME_ANY_ACCOUNT to check membership of a user.
Sep 24, 2009
#4 code-rev...@gtempaccount.com
Comment by Shawn Pearce <sop@google.com> on Thu Sep 03 14:31:48 PDT 2009

Change Ic06d8d5ba9d96354e47e8eda751c40b1fc360374 adds support for the user to
view their own groups under Settings > Groups.

Change Ia415f003964401ca4a5eb92d711ae93d936c986e shows basic non-repeating
properties on the group page, for the group owner to view and verify the
mapping.
Sep 24, 2009
#5 code-rev...@gtempaccount.com
Update by Shawn Pearce <sop@google.com> on Thu Sep 03 14:31:53 PDT 2009

Fixed in version 2.0.21.
Status: Fixed
Sep 25, 2009
#6 code-rev...@gtempaccount.com
(No comment was entered for this change.)
Labels: FixedIn-2.0.21
Oct 21, 2012
#7 sop@google.com
(No comment was entered for this change.)
Status: Released