production-taskbar / backend / config / utils / ldap.py
ldap.py
Raw
from os import environ


def sync_user_relations(user, ldap_attributes):
    update_fields = ['is_staff']
    user.is_staff = True

    if environ.get("LDAP_ADMINS") in ldap_attributes['memberOf']:
        user.is_superuser = True
        update_fields.append('is_superuser')

    user.save(update_fields=update_fields)