LDAP member permission override in API
Description
Issue #343 (closed) ("Allow option to change permission levels of users when LDAP group sync is enabled") and MR !822 (merged) ("Override LDAP members permissions") added the ability to override LDAP group permissions for a particular group member.
This is currently possible from the Web Interface, but not from the GitLab API.
The current behaviour is that if a member's access_level
is changed from the API, then the next time the LDAP sync runs the access_level
is changed back again to the LDAP access level.
Using the web interface sets an override
flag on the member which stops the LDAP sync from changing the access_level
.
Proposal
Provide a means of overriding LDAP member permissions from the GitLab API. One easy way of achieving this is by exposing the override
flag in the API.