Default role and team assignment

[rwoo]

Please help me securing our SugarCRM…

I would like to enable "Auto Create Users" with LDAP grouping, but the option gives new users wide open access to SugarCRM. I would like to assign read only role and team for all new users prior to his/her access to the system.

What should I modify to assign default role and team when a new user gets created?

I am running SugarCRM 5.5.1 Professional.

Thanks,
RLW

[rwoo]

I believe I got it to work.

I modified \modules\Users\authentication\LDAPAuthenticate\LDA PAuthenticateUser.php

I added the following lines to createUser function after save() before return statement.

$user->default_team = default_team_id;
$user->load_relationship('teams');
$user->teams->add(default_team_id);
$user->load_relationship('aclroles');
$user->aclroles->add('default_role_id');

My question now is how can I make this upgrade safe...

Thanks,
Rebekah