[medpri] LDAP Extended: if ldap_query_for_select_dotproject_groups_title returns an empty set, Roles are created from the previous populated role

[cleary]

Test: Modify the ldap_query_for_select_dotproject_groups_title in system settings, to use a valid formatted LDAP query that returns no results, then login as a user

Expected Outcome(s):
No roles should be created, no errors should be logged

Result: Failed - Roles from the previous query (that returned results) are created for the user (cached?)

[rafaelqg]

I would like to verify this bug on your environment. Maybe together we may find out the cause and fix that.

[cleary]

Need to rethink expected behaviour here -

[cleary]

Clarifying expected behaviour:

• the roles should not be touched
• if the user has no role membership, all role memberships should be removed from the user