Thread:Extension talk:LDAP Authentication/Best method for assigning user to a permission based off AD/LDAP Group