tree d61c9c7a18bfffec743b1eaa442a60bc83c861c0
parent 75ea3e476e9e8ae4ba955d30b2d5a57494321eb8
author Alexander Filippov <a.filippov@yadro.com> 1644421357 +0300
committer Ratan Gupta <ratankgupta31@gmail.com> 1669607211 +0000

UserMgr: Fix the privilege determination

By default, all users in Active Directory have the primary group
`users`. Giving the full access to the BMC to all users from the such
group is a bad idea. And changing the primary group in
Active Directory/LDAP can be inadvisable.

This fix allows to use in the role mapping the group that isn't the
primary group. All members of the such group will get the role,
according with the role mapping.

Tested by:
  - Configure LDAP
  - Add non primary LDAP group to the role map
  - Verify `GetUserInfo` reply for the member of the group used in the
    previous step. It should contain corresponding privilege.
  - Add primary LDAP group to the role map and verify `GetUserInfo` for
    its member. It also should contain corresponding role.

Change-Id: I61a87a21446577c0bf059f50139c7b4c711059c7
Signed-off-by: Alexander Filippov <a.filippov@yadro.com>