docs(dashboard): surface the short-name GroupToTag key constraint in the class summary

The consequence that full-DN keys can never match (the shared LDAP
provider pre-strips groups to short RDN names) was documented only in
MapGroupsToTags's lookup comment; the class-level <summary> now states
it and points there, mirroring DashboardGroupRoleMapping.
This commit is contained in:
Joseph Doherty
2026-08-18 09:20:46 -04:00
parent 21903710e7
commit 4b6f9077bf
@@ -6,6 +6,9 @@ namespace ZB.MOM.WW.MxGateway.Server.Dashboard;
/// Sibling of <see cref="DashboardGroupRoleMapping"/> and deliberately follows /// Sibling of <see cref="DashboardGroupRoleMapping"/> and deliberately follows
/// the same group-matching rules (full DN first, leading-RDN fallback, /// the same group-matching rules (full DN first, leading-RDN fallback,
/// case-insensitive) so operators write one kind of group key for both maps. /// case-insensitive) so operators write one kind of group key for both maps.
/// Because the shared LDAP provider delivers groups already stripped to short
/// RDN names, full-DN <c>GroupToTag</c> keys can never match — use short group
/// names as keys (see the lookup comment in <see cref="MapGroupsToTags"/>).
/// Tags gate dashboard event VISIBILITY only; they are never a data-access /// Tags gate dashboard event VISIBILITY only; they are never a data-access
/// constraint. /// constraint.
/// </summary> /// </summary>