HomePhabricator

ldap: allow to disable the groups relevance filtering

Authored by Luca Milanesio <luca.milanesio@gmail.com> on Dec 19 2018, 1:13 AM.

Description

ldap: allow to disable the groups relevance filtering

The LDAP groups are filtered by relevance to the Gerrit ACLs.
However, that optimization has the side effect of blocking users
to access legitimate projects if they are temporarily not cached
in memory.

Allow to disable the LDAP filtering optimization for having always
a 100% consistent ACL evaluation, regardless of the project's cache
status.

By default, keep the existing behaviour if not configured differently
on the gerrit.config.

Bug: Issue 9781
Change-Id: I4b66cbe40d7d260cc2d0ba4bdc1a5b22e99d5463

Event Timeline

Luca Milanesio <luca.milanesio@gmail.com> committed rGERRITDEPLOYa05d42b0eff3: ldap: allow to disable the groups relevance filtering (authored by Luca Milanesio <luca.milanesio@gmail.com>).Dec 19 2018, 1:44 AM