{"action":"closed","issue":{"url":"https://api.github.com/repos/owncloud/core/issues/14202","labels_url":"https://api.github.com/repos/owncloud/core/issues/14202/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/core/issues/14202/comments","events_url":"https://api.github.com/repos/owncloud/core/issues/14202/events","html_url":"https://github.com/owncloud/core/issues/14202","id":57599964,"number":14202,"title":"[LDAP wizard] login filter should enforce the usage of the user filter","user":{"login":"jvillafanez","id":1477829,"avatar_url":"https://avatars.githubusercontent.com/u/1477829?v=3","gravatar_id":"","url":"https://api.github.com/users/jvillafanez","html_url":"https://github.com/jvillafanez","followers_url":"https://api.github.com/users/jvillafanez/followers","following_url":"https://api.github.com/users/jvillafanez/following{/other_user}","gists_url":"https://api.github.com/users/jvillafanez/gists{/gist_id}","starred_url":"https://api.github.com/users/jvillafanez/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jvillafanez/subscriptions","organizations_url":"https://api.github.com/users/jvillafanez/orgs","repos_url":"https://api.github.com/users/jvillafanez/repos","events_url":"https://api.github.com/users/jvillafanez/events{/privacy}","received_events_url":"https://api.github.com/users/jvillafanez/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/owncloud/core/labels/app:user_ldap","name":"app:user_ldap","color":"02d7e1"},{"url":"https://api.github.com/repos/owncloud/core/labels/Enhancement","name":"Enhancement","color":"02e10c"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-02-13T13:44:12Z","updated_at":"2015-02-16T10:58:29Z","closed_at":"2015-02-16T10:58:29Z","body":"Ideally the login filter should pick a subset of the users filtered by the user filter. This is done fine following the steps with the wizard, but the user can choose to save a different raw filter.\r\n\r\n1. In the wizard, go to the user filter tab and use (for example) the filter: `(|(&(objectclass=inetOrgPerson)(sn=a*)))`\r\n2. Go to the login filter and click in the \"edit raw filter\"\r\n3. The raw filter shown uses the correct user filter (with the uid option added)\r\n4. You can edit the filter to use another one: (&(|(&(objectclass=inetOrgPerson)(sn=b*)))(uid=%uid))\r\n\r\nIn this scenario, the admin can see all users whose surname starts with an \"a\", but none of then will be able to access. Plus all users whose surname starts with \"b\" can login, but they're not shown in the users page"}}