providers/ldap: fix global search_full_directory permission not being…

… sufficient (cherry-pick #12028) (#12030) providers/ldap: fix global search_full_directory permission not being sufficient (#12028) * providers/ldap: fix global search_full_directory permission not being sufficient * use full name of permission --------- Signed-off-by: Jens Langhammer <[email protected]> Co-authored-by: Jens L. <[email protected]>
goauthentik · Nov 15, 2024 · 3ae0001 · 3ae0001
1 parent 66a4970
commit 3ae0001
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/authentik/providers/ldap/api.py b/authentik/providers/ldap/api.py
@@ -159,7 +159,10 @@ def check_access(self, request: Request, pk) -> Response:
         access_response = PolicyResult(result.passing)
         response = self.LDAPCheckAccessSerializer(
             instance={
-                "has_search_permission": request.user.has_perm("search_full_directory", provider),
+                "has_search_permission": (
+                    request.user.has_perm("search_full_directory", provider)
+                    or request.user.has_perm("authentik_providers_ldap.search_full_directory")
+                ),
                 "access": access_response,
             }
         )