Hi,

In the process of building a contentment management systems in which user authentication is based on LDAP (Active Directory).
Every user is a part of a department(s), as well as a part of a project(s). Nodes (Pages, Stories etc.) will be tagged to the project and the department using taxonomy.
I would like authenticated users to be able to edit documents belonging to their department and/or their projects. I am thinking of using Organic groups or Taxonomy Access Control for this.

    My questions
  • Can I map AD groups to Drupal groups (an not to roles?)
  • What should I look for in integrating the above modules with LDAP information

Thanks

Comments

outinsun’s picture

outinsun commented

I have the same question. It sounds like we're both trying to build something akin to Confluence/Sharepoint/Jive. I actually have it working mapping LDAP groups to Drupal roles with TAC. Only problem is I'm liable to end up with hundreds of roles. Not sure that will scale. If nothing else various permissions admin screens, with a column for every role, will get very very wide.

johnbarclay’s picture

johnbarclay commented
Status: Active » Closed (won't fix)

Closing 5.x issues to clean out issue queue.