Forum Discussion

Claud_13959's avatar
Claud_13959
Icon for Nimbostratus rankNimbostratus
Sep 09, 2015

Add a string to an Access Policy variable

In my access policy I have the following variable set up:

 

session.ldap.last.attr.trimmedMembership = regexp -inline -all {CN=aPUMA[^,]+,} [mcget {session.ldap.last.attr.memberOf}]

 

This produces the example list depending on the user's LDAP group membership:

 

CN=aPUMAApp-Admin, CN=aPUMAApp-User, CN=aPUMAWeb-Admin, CN=aPUMASWeb-User

 

I want to add a new role, aPUMAApp-Design, to the list regardless of the user's group membership.

 

How do I modify the variable above to do this?

 

2 Replies

  • You should be able to have an additional variable assign as follows...

    session.ldap.last.attr.trimmedMembership = 
    
    expr { [concat "[mcget {session.ldap.last.attr.trimmedMembership}], CN=aPUMAApp-Design" ] }
    

    Let me know if this helps.

    Seth