View Issue Details

IDProjectCategoryView StatusLast Update
0002054SOGoWeb Generalpublic2014-05-09 13:35
Reportermats Assigned To 
PrioritynormalSeverityfeatureReproducibilityalways
Status newResolutionopen 
Product Version2.0.1 
Summary0002054: Automatic calendar/addressbook subscriptions on group change
Description

The automatic subscription feature for calendars and addressbooks does not seem to track changes in group membership of individual users, ie. when a user is added to a group after a calendar/addressbook has been shared to this group, the corresponding group ACLs do not seem to be applied to this new group member.

This issue has been discussed before ( 0000395 , closed fixed but possibly not so, with regards to the present issue).

As has been suggested in the discussion for 0000395, possible solutions would be

  • either checking for group membership on login and update subscriptions/visibility of shared resources (ref. 0000395:0002137 )

  • or at least the option to update subscriptions based on a script (or sth. along the lines of "sogo-tools update-permissions") which could be cronjobbed (ref 0000395:0002829).

The solution proposed in 0000395:0002137 was to leave it at the ressource owner's discretion to manually hit the "subscribe for..." checkbox for each shared ressource whenever a new user is added to the respective group.

This is probably not a realistic option in scenarios where lots of groups and users (with non-technical background) are involved. Automatic update of ACLs on group membership change (ie. actively reflecting changes in the LDAP group structure) therefore would be a most welcome feature.

Additional Information

A similar feature request also did appear on the mailing list recently:
https://inverse.ca/sogo/lists/arc/users/2012-08/msg00219.html

TagsNo tags attached.

Activities

ludovic

ludovic

2012-11-21 17:50

administrator   ~0004960

It's not possible to do in SOGo.

Imagine if we would have to check this, during the user's login.

SOGo would have to pull ALL groups and see if the user is now a member. Then, it'll have to lookup all resources shared to that group.

This could be very very lengthy.

mats

mats

2012-11-22 00:45

reporter   ~0004965

I see. What about the other option - updating group memberships "on demand" through sogo-tools? Would that be more easy / sensible to implement?

tanstaafl

tanstaafl

2014-03-03 14:09

reporter   ~0006597

This seems kind of important, not happy to see no response to mats last question...

Ludovic?

ludovic

ludovic

2014-05-09 13:35

administrator   ~0007007

It's possible to add the feature in sogo-tool but it's low-priority, as admin can already do the operation using the Web interface.

Issue History

Date Modified Username Field Change
2012-10-21 22:53 mats New Issue
2012-11-21 17:50 ludovic Note Added: 0004960
2012-11-22 00:45 mats Note Added: 0004965
2014-03-03 14:09 tanstaafl Note Added: 0006597
2014-05-09 13:35 ludovic Note Added: 0007007