<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> On 08/28/2012 02:55 PM, Jordan OMara wrote: <blockquote cite="mid:20120828185555.GD16168@redhat.com" type="cite">jrist & I were working on a bug and figured out an interesting side effect of LDAP user creation on the fly when you log on: If you don't have LDAP group / role mapping enabled, and if your admin hasn't pre-configured your account, you don't have an org assigned. Is the best behavior: 1. notifying the user to contact their admin (which they'll need to do anyway, to get their account set up properly) 2. choosing the only org if only 1 exists 3. choosing the first org if > 1 exists 4. letting them choose ANY org in the interstitial 5. A combination of 1 and 2-4 </blockquote> My vote would be for #1. I'm wary of giving a user permission to something automatically. Is there some way for the admin user to 'prepopulate' users from LDAP? So they could set up roles and assign orgs at that time? (This way it doesn't have to be a 2 step process) -Justin <blockquote cite="mid:20120828185555.GD16168@redhat.com" type="cite"> <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ katello-devel mailing list <a class="moz-txt-link-abbreviated" href="mailto:katello-devel@redhat.com">katello-devel@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/katello-devel">https://www.redhat.com/mailman/listinfo/katello-devel</a></pre> </blockquote> </body> </html>