[SAC] [OSGeo] #1757: Log LDAP edits performed via Drupal website, or remove the functionality

[OSGeo]

#1757: Log LDAP edits performed via Drupal website, or remove the functionality
---------------------------+--------------------------
 Reporter:  strk           |      Owner:  sac@…
     Type:  task           |     Status:  new
 Priority:  normal         |  Milestone:
Component:  Systems Admin  |   Keywords:  ldap, userid
---------------------------+--------------------------
 I found out LDAP database can be also edited via Drupal,
 from URLs like: https://www.osgeo.org/user/409/edit/ldap_user_data
 (where 409 correspond to my own username).

 For simplicity we might want to disable that form and have users sent to
 the LDAP editing form: https://www.osgeo.org/cgi-
 bin/auth/ldap_edit_user.py

 Or, at least, we should have the Drupal mediated editing form also log
 edits, like the ldap-specific form linked above does since a few weeks.

 For additional info: I noticed the Drupal form allows setting a "First
 Name" (givenName in LDAP database) whereas the ldap_edit_user.py script
 does not allow that (in case we want to add that).

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1757>
OSGeo <http://www.osgeo.org/>
OSGeo committee and general foundation issue tracker.