update views

app/views/groups/ldap_group_links/index.html.haml

-- page_title "LDAP Groups"
+- page_title 'LDAP Syncrhonizations'
 %h3.page-title Linked LDAP groups
 = render 'ldap_group_links/form', group: @group
 = render 'ldap_group_links/ldap_group_links', group: @group
-

app/views/ldap_group_links/_form.html.haml

@@ -6,16 +6,44 @@
           LDAP Server
         .col-sm-10
           = f.select :provider, ldap_server_select_options, {}, class: 'form-control'
+
       .form-group.clearfix
+        = f.label :cn, class: 'control-label' do
+          Sync method
+        .col-sm-2
+        .col-sm-10
+          .radio
+            = label_tag :ldap_group do
+              = radio_button_tag :sync_method, :group, true
+              .option-title
+                LDAP Group cn
+          .radio
+            = label_tag :ldap_filter do
+              = radio_button_tag :sync_method, :filter
+              .option-title
+            LDAP user filter
+
+      .form-group.clearfix.cn-link
         = f.label :cn, class: 'control-label' do
           LDAP Group cn
         .col-sm-10
-          = f.hidden_field :cn, placeholder: "Ex. QA group", class: "xxlarge ajax-ldap-groups-select input-mn-300"
+          = f.hidden_field :cn, placeholder: 'Ex. QA group', class: 'xxlarge ajax-ldap-groups-select input-mn-300'
           .help-block
             Synchronize #{group.name}'s members with this LDAP group.
             %br
             If you select an LDAP group you do not belong to you will lose ownership of #{group.name}.
 
+      .form-group.clearfix.filter-link
+        = f.label :filter, class: 'control-label' do
+          LDAP User filter
+        .col-sm-10
+          = f.text_field :filter, placeholder: 'Ex. (&(objectCategory=person)(objectClass=developer))', class: 'form-control xxlarge input-mn-300'
+          .help-block
+            - ldap_link = link_to 'LDAP Search Filter Syntax', 'https://msdn.microsoft.com/en-us/library/aa746475(v=vs.85).aspx'
+            This query must use valid #{ldap_link}. Synchronize #{group.name}'s members with this LDAP user filter.
+            %br
+            If you do not belong to this LDAP user filter you will lose ownership of #{group.name}.
+
       .form-group.clearfix
         = f.label :group_access, class: 'control-label' do
           LDAP Access
@@ -27,4 +55,4 @@
             You can manage permission levels for individual group members in the Members tab.
 
     .form-actions
-      = f.submit 'Add synchronization', class: "btn btn-create"
+      = f.submit 'Add synchronization', class: 'btn btn-create'

app/views/ldap_group_links/_ldap_group_link.html.haml

@@ -2,7 +2,7 @@
   .pull-right
     = link_to group_ldap_group_link_path(group, ldap_group_link), method: :delete, class: 'btn btn-danger btn-sm' do
       = fa_icon('unlink', text: 'unlink')
-  %strong= ldap_group_link.cn
+  %strong= ldap_group_link.cn ? "Group: #{ldap_group_link.cn}" : "Filter: #{ldap_group_link.filter}"
 
   - if ldap_group_link.config
     .light