To be more explaining.
This is part of our xwiki.cfg:
{code:java}
#-# List of groups that a new user should be added to by default after registering. Comma-separated list of group
#-# document names.
#-# The default list depends on the value of xwiki.authentication.group.allgroupimplicit:
#-# 0: created users are added to XWiki.XWikiAllGroup group page
#-# 1: created users are not added to any group page (but they will virtually be part of XWiki.XWikiAllGroup group)
# xwiki.users.initialGroups=XWiki.XWikiAllGroup
#-# Should all users be considered members of XWiki.XWikiAllGroup, even if they don't have an associated object in the
#-# group's document?
# xwiki.authentication.group.allgroupimplicit=0 {code}
{{{}{}}} The problem is:
* we use initialGroup _XWiki.XWikiAllGroup_ to set some basic view right like layout, sandbox, help, menu etc.
* then user logs in and gets groups from AD for special purposes
* OIDC plugin adds groups from the AD to the user profile
* OIDC plugin removes group _XWiki.XWikiAllGroup_ from the user because this group are not in the AD
* (a simple fix for us could be to map the base group to an All AD group: but this isn't existing in AD)
Was I able to make myself reasonably clear? |
|
