Hello,
At the moment, LDAPUserFolder does not support LDAP nested groups, so if we set a specific Plone role to a group, this role will be applied to any user who are directly members of this group but not to members who are member of another group which is part of this group.
Here is a fix for LDAPUserFolder.py which fix that (in method getGroups):
1262,1264d1261
<
< # FIX EBR: nested group support
< group_list = group_list + [g for g in self.getGroups(dn=dn, attr=attr, pwd=pwd) if g not in group_list]
|
