At the moment, if a user mapping handler provides groups, it has to append "Group" to every group name, which is a PITA if the groups come from (e.g.) a corporate database. AFAICT the only reason is the
will work. This methods should be moved where it can be overidden by a user mapping implementation.
It is also needed to resolve nested groups, e.g. if a group has an item with a name ending in Group, it resolves the group recursively, else it is a user name. At least that was the case in Cairo.
How about simply appending a Group suffix to any goup imported from LDAP?
We tried that, but it was a bit of a hack and easier to code a proper solution.
Note that "isGroup" still looks for the Group suffix in TWikiUserMapping
(i.e. for 99% of TWiki installs). This only kicks in if an alternate usermapping is used.