Plugin: Azure: adapt order for role verification to have first admin,…

… then teacher to avoid setting a teacher role to an admin - refs BT#21500
AngelFQC · Sep 23, 2024 · df28327 · df28327
1 parent f5d563c
commit df28327
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/plugin/azure_active_directory/src/callback.php b/plugin/azure_active_directory/src/callback.php
@@ -97,10 +97,9 @@
 
         $azureGroups = $provider->get('me/memberOf', $token);
 
-        foreach ($azureGroups as $azureGroup) {
-            $azureGroupUid = $azureGroup['objectId'];
-
-            foreach ($roleGroups as $userRole => $groupUid) {
+        foreach ($roleGroups as $userRole => $groupUid) {
+            foreach ($azureGroups as $azureGroup) {
+                $azureGroupUid = $azureGroup['objectId'];
                 if ($azureGroupUid === $groupUid) {
                     $roleActions[$userRole]($user);