URL:
https://github.com/SSSD/sssd/pull/5241
Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules
pbrezina commented:
"""
Ah, ok. And shouldn't it work also the other way - if ad_gpo_implicit_deny = False and
there is not explicit deny rule then allow access?
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5241#issuecomment-679012653