Improve syntax of ldap searchFilter and groupSearchFilter
Description
The searchFilter and groupSearchFilter values are a pain to define currently. For example, say you want to restrict by object class. You'd have to enter the search filter:
(&(uid={0})(objectClass=inetOrgPerson)
The (uid={0}) is redundant and MUST always be present in the filter. It would be much better if the user only had to define the extra filter parts that they wanted added, such as:
(objectClass=inetOrgPerson)
The code should then dynamically append the default filter. The same logic applies for the group filter.
I believe this change will be backwards compatible for users that defined the search filters in the old way. It would probably mean an actual query of something like:
The searchFilter and groupSearchFilter values are a pain to define currently. For example, say you want to restrict by object class. You'd have to enter the search filter:
(&(uid={0})(objectClass=inetOrgPerson)
The (uid={0}) is redundant and MUST always be present in the filter. It would be much better if the user only had to define the extra filter parts that they wanted added, such as:
(objectClass=inetOrgPerson)
The code should then dynamically append the default filter. The same logic applies for the group filter.
I believe this change will be backwards compatible for users that defined the search filters in the old way. It would probably mean an actual query of something like:
(&(uid={0})(&(uid={0})(objectClass=inetOrgPerson))