Complex Matching logic for Group Queries using LDAPGroupQuery()

You can use LDAP to restrict user access to ArcViz resources by using multiple require groups.

Availability Note. This feature depends on the LDAPGroupQuery() class, which is available starting with the django_auth_ldap release 1.2.12.

To use a complex group query, implement the LDAP authorization requirement group, as we demonstrate in the following code snippet:

AUTH_LDAP_REQUIRE_GROUP = (
  (LDAPGroupQuery("cn=enabled,ou=groups,dc=example,dc=com") |
   LDAPGroupQuery("cn=also_enabled,ou=groups,dc=example,dc=com")) &
   ~LDAPGroupQuery("cn=disabled,ou=groups,dc=example,dc=com")
)

For more information, see https://django-auth-ldap.readthedocs.io/en/latest/reference.html.