from os import environ def sync_user_relations(user, ldap_attributes): update_fields = ['is_staff'] user.is_staff = True if environ.get("LDAP_ADMINS") in ldap_attributes['memberOf']: user.is_superuser = True update_fields.append('is_superuser') user.save(update_fields=update_fields)