Global scope by group membership

[acharseth]

To restrict login to users belonging to one or more groups and to limit the syncronization to these groups I would like to create a scope on membership of these groups. Is this possible? Then how?
I can use rules, as described in Creating Rules, which limits access according to rules using group membership but this will not limit the syncronization to these members, right?

[acharseth]

I guess I can use $query->where('memberof', '=', 'cn=some_group'); (in the Scopesclass).
I now just have to figure out why static::addGlobalScope(new MyScopeClass); inside boot method of my User class fails with error message Global scope must be an instance of Closure or Scope..

Another peculiarity is that when I use the Directory Emulator I only see the group added by the seeder in memberof, not the group I added "dynamically" using Tinker.

[acharseth]

Wrong User-class! I added addGlobalScope to my Models\User-class. It should have been added to the Ldap\User-class.