Support for management groups

[dorianim]

Hi,

I had this idea a while ago and would like to start a conversion on it:
I think it would be cool to have an interface for management groups.
There is not much documentation about them, but I think that they are very powerful. As far as I understand it, they are basically projects without a share. Some documentation can be found here:

• https://github.com/linuxmuster/sophomorix4/wiki/objectClasses#overview-of-all-groups-and-their-sophomorixtype
• https://docs.linuxmuster.net/de/latest/systemadministration/network/radius/index.html?highlight=managementgroup#zugehorigkeit-zur-gruppe-wifi
• Run sophomorix-managementgroup --help

The usecase I have in mind is this: I'd like to create a managementgroup for every external service I have (rocketchat, nextcloud, wiki, ...) and use the managementgoup to control who has access to that service.

What do you think @kiarn ?

Regards,
Dorian

[kiarn]

Hi,

I think it's a good idea to have a look at this in order to add flexibility in the Webui.
But we should with other devs decide over use cases and strategie about this functionality.

Calling sophomorix-managementgroup --nowifi rocketchat is not a pretty clear syntax in order to avoid access to someone. A general option like --noacess would be clearer.

Arnaud

[dorianim]

Hi Arnaud,

But we should with other devs decide over use cases and strategie about this functionality.

Yes.

Calling sophomorix-managementgroup --nowifi rocketchat is not a pretty clear

That is true. But managementgroups can also be cotrolled via config files in /etc/linuxmuster/sophomorix/default-school/<group>.something.conf. But I can't find good documentation on this (@jeffbeck ?)

Regards,
Dorian

[PLanB2008]

Once there was a plan to have more configurable management groups. I'm not sure if this was implemented, I don't thinks so.

The general idea is to have groups services rely on and are manageable by the teacher via WebUIs session module. In theory this could be extended to whatever you want but we have to discuss this.
At the moment there are few static defined groups, if we make this customizable it could break some workflows.

[dorianim]

It is already customizable. You can create managementgroups using sophomorix in the terminal.