From 5db8e43d5ccc61997e3d55e9ca88e2bca28719dc Mon Sep 17 00:00:00 2001 From: Tim Abbott Date: Thu, 6 May 2021 09:44:47 -0700 Subject: [PATCH] ldap: Fix incorrect check for deactivating all owners. We apparently failed to update this when we did the migration from the administrator role to the owner role as the top role in Zulip. --- zerver/management/commands/sync_ldap_user_data.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/zerver/management/commands/sync_ldap_user_data.py b/zerver/management/commands/sync_ldap_user_data.py index 8b05f919c5..0cfc2233d5 100644 --- a/zerver/management/commands/sync_ldap_user_data.py +++ b/zerver/management/commands/sync_ldap_user_data.py @@ -46,10 +46,10 @@ def sync_ldap_user_data( is_bot=False, is_active=True, realm__string_id=string_id, - role__gte=UserProfile.ROLE_REALM_ADMINISTRATOR, + role__gte=UserProfile.ROLE_REALM_OWNER, ).exists(): error_msg = ( - "Ldap sync would have deactivated all administrators of realm %s. " + "Ldap sync would have deactivated all owners of realm %s. " + "This is most likely due " + "to a misconfiguration of LDAP settings. Rolling back...\n" + "Use the --force option if the mass deactivation is intended."