NeoAnd/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2025-08-24 16:26:09 -06:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity

11508 add is_active, reset superuser and staff based on Azure

Browse Source
This commit is contained in:
Arthur 2023-08-03 20:47:34 +07:00
parent 6ebea286de
commit 82dde62c36
1 changed files with 15 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
netbox/netbox/authentication.py
View File

@ -413,6 +413,8 @@ def azure_map_groups(response, user, backend, *args, **kwargs):
"Azure group mapping has been configured, but SOCIAL_AUTH_AZUREAD_GROUP_MAP is not defined." "Azure group mapping has been configured, but SOCIAL_AUTH_AZUREAD_GROUP_MAP is not defined."
) )
all_users_active = getattr(settings, "SOCIAL_AUTH_AZUREAD_USER_DEFAULT_ACTIVE", False)
url = 'https://graph.microsoft.com/v1.0/me' url = 'https://graph.microsoft.com/v1.0/me'
access_token = response.get('access_token') access_token = response.get('access_token')
@ -433,23 +435,24 @@ def azure_map_groups(response, user, backend, *args, **kwargs):
headers=headers, headers=headers,
) )
user.is_superuser = False is_superuser = False
user.is_staff = False is_staff = False
values = response.json().get('value', []) values = response.json().get('value', [])
for value in values: for value in values:
# AD response contains both directories and groups - we only want groups # AD response contains both directories and groups - we only want groups
if value.get('@odata.type') == '#microsoft.graph.group': if value.get('@odata.type') == '#microsoft.graph.group':
group_id = value.get('id', None) group_id = value.get('id', None)
user.is_active = True if all_users_active:
is_active = True
else:
is_active = group_id in flags_by_group['is_active']
if group_id in flags_by_group['is_superuser']: if group_id in flags_by_group['is_superuser']:
user.is_superuser = True is_superuser = True
user.save()
if group_id in flags_by_group['is_staff']: if group_id in flags_by_group['is_staff']:
user.is_staff = True is_staff = True
user.save()
if group_id in group_mapping: if group_id in group_mapping:
group = Group.objects.get(name=group_mapping[group_id]) group = Group.objects.get(name=group_mapping[group_id])
@ -457,3 +460,8 @@ def azure_map_groups(response, user, backend, *args, **kwargs):
group.user_set.add(user) group.user_set.add(user)
else: else:
logger.info(f"Azure group mapping - group: {group_mapping[group_id]} not found.") logger.info(f"Azure group mapping - group: {group_mapping[group_id]} not found.")
user.is_superuser = is_superuser
user.is_staff = is_staff
user.is_active = is_active
user.save()