Regarding our companies compliance requirements we must not allow to search our active directory groups for everybody.
Sadly every user is able to create private repositories (although they do not have any permission to other repositories/projects) and thus every user is also able to administer them and SEARCH Groups.
One solution may be to have a plugin that provides solutions for scenarios like:
If user is in group x he only can search for groups x-x
or
Only users in group x, y and z can search for group names
or
Set a flag (checkbox) for all private Repositories to deny group search.
or
configuration directive to deny group search/set up for all but Stash Project Creators/Administrators/Stash System Administrators + the same separate configuration for user search
I think the last one is very restrictive but maybe easy to code? Te best way might for us to have the complete control to set filters to groups (patterns) that will not be allowed to search in our user directory.
The more generic requirement is:
In our LDAP/active Directory we have a lot of users and a lot of users are placed into different role-specific groups to manage permissions a way more simple.
It comes that certain Users (that are in certain groups) must not search in our LDAP. And these have to be denied also by this application. How - depends on solutiions we can think of. Some ideas are noted above.
Do you have other ideas? Can someone provide maybe a quick solutions and for later maybe a more confortable one?
Thank you very much!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.