Desk groups are the committees

One Kanidm group per committee, named as the content names them, plus
kasserer, styret, komiteer and nabohjelp.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
bl
2026-09-23 06:48:31 +02:00
co-authored by Claude Fable 5.1
parent 29f2b9daec
commit 506cb84e82
+2 -2
View File
@@ -22,14 +22,14 @@ $K system oauth2 add-redirect-url $C "https://$PORTAL_HOST/auth/callback" || tru
# The desk groups: every group the content gates a directory on. Keep
# this list equal to the `qualifies` values under questions/.
has_group tomtervel_members || $K group create tomtervel_members
for g in kasserer styret trafikkomite lekeplasskomite arrangementskomite nabohjelp komiteer; do
for g in kasserer styret komiteer nabohjelp arrangementer elvesti horingsinstans lekeplasser miljogate pendlerforhold trafikk; do
has_group tomtervel_$g || $K group create tomtervel_$g
$K group add-members tomtervel_members tomtervel_$g
done
# Portal asks for openid, profile and email; groups arrive as a claim.
$K system oauth2 update-scope-map $C tomtervel_members openid profile email
for g in kasserer styret trafikkomite lekeplasskomite arrangementskomite nabohjelp komiteer; do
for g in kasserer styret komiteer nabohjelp arrangementer elvesti horingsinstans lekeplasser miljogate pendlerforhold trafikk; do
$K system oauth2 update-claim-map $C groups tomtervel_$g $g
done
$K system oauth2 update-claim-map-join $C groups array