MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

chg: [shibbauth] added option to block organisation changes at login 

- New ApacheShibbAuth.BlockOrgModifications setting added, defaults to false, boolean. If set to true, will block updates to the organisation of existing users on authentication. This preserves any modifications made by a site admin in MISP and is similar to ApacheShibbauth.BlockRoleModifications (same logic applied to role modifications).
pull/7607/head
Liviu Valsan 2021-07-26 15:02:18 +02:00 committed by Alexandre Dulaunoy
parent e45245ec86
commit 4b74a0d342
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/Plugin/ShibbAuth/Controller/Component/Auth/ApacheShibbAuthenticate.php
View File

@ -39,6 +39,7 @@ class ApacheShibbAuthenticate extends BaseAuthenticate
* 'group_one' => 1,
* ),
* 'DefaultOrg' => 'MY_ORG',
* 'BlockOrgModifications' => false // set to true if you wish for the user's organisation never to be updated during login. Especially useful if you manually change organisations in MISP
* 'DefaultRole' => false // set to a specific value if you wish to hard-set users created via ApacheShibbAuth
* 'BlockRoleModifications' => false // set to true if you wish for the roles never to be updated during login. Especially * // useful if you manually change roles in MISP
* 'BlockOrgModifications' => false // set to true if you wish for the organizations never to be updated during login. Especially * // useful if you manually change orgs in MISP
@ -70,6 +71,7 @@ class ApacheShibbAuthenticate extends BaseAuthenticate
$roleId = -1;
$org = Configure::read('ApacheShibbAuth.DefaultOrg');
$useDefaultOrg = Configure::read('ApacheShibbAuth.UseDefaultOrg');
$blockOrgModifications = Configure::check('ApacheShibbAuth.BlockOrgModifications') ? Configure::read('ApacheShibbAuth.BlockOrgModifications') : false;
// Get tags from SSO config
$mailTag = Configure::read('ApacheShibbAuth.MailTag');
$orgTag = Configure::read('ApacheShibbAuth.OrgTag');