formcreator icon indicating copy to clipboard operation
formcreator copied to clipboard

Using other attributes related to LDAP field selection

Open derry43 opened this issue 4 years ago • 1 comments

Problem Description I am creating a form which allows the user to select a file server folder name to which they require access and which generates a change ticket containing both the user name, folder name and the corresponding access group name.

The folder selection field is created using an LDAP field to query domain groups based on a filter, e.g. (&(objectClass=group)(|(cn=agA*)(cn=agB*))) where the folder name is held in the LDAP info attribute. This I can achieve by creating such an attibute and selecting it during question creation. I am very grateful for this capability.

However I also want to be able to populate the target change ticket with at least one other Attribute from the same LDAP record i.e. the (LDAP)cn attibute. So that the ticket could say something like, "Grant user ##answer_2## RW access to folder ##answer_5## by adding to access control group ##answer_6##".

Would also be even better to be able to set approver based on the associated LDAP managedBy attribute in a similar way.

Proposed Solutions

Either create value tags for all the allowed attributes for each LDAP field in a form. So if we had an LDAP Field which was question 5 say, and which allowed selection of the (LDAP)cn attribute, selecting a value from this field would populate ##answer_5## value tag with the value of the (LDAP)cn attribute, but would also populate a set of related value tags, possibly: ##ldap_5_cn##, ##ldap_5_displayName##, ##ldap_5_info## etc, with the values of the other allowed attributes from the same LDAP record.

Then the ticket text in my case above could be generated by using the format "Grant user ##answer_2## RW access to folder ##ldap_5_info## by adding to access control group ##ldap_5_cn##", or "Grant user ##answer_2## RW access to folder ##answer_5## by adding to access control group ##ldap_5_cn##"

Or more ticky...

Create a Linked LDAP field, which can be linked to any other LDAP Field (primary) on the form but allows selection based on a different Attribute. So if you select a value from the primary LDAP field, the Linked LDAP field allows you to select a different attribute from the record selected in the primary LDAP field. So assuming that field 5 was the primary LDAP field and field 6 was the Linked LDAP field, then the ticket text could be created in the following way "Grant user ##answer_2## RW access to folder ##answer_5## by adding to access control group ##answer_6##".

derry43 avatar Oct 15 '21 11:10 derry43

Related to request #2498 but not exactly the same, could be part of the same feature set though.

derry43 avatar Jan 02 '22 13:01 derry43