Enhance LDAP cross reference with support for dynamic groups.
The LDAP module has the ability to automatically assign access rights by using a Group Cross Reference. The module looks up the user in the directory tree and check what manual groups they have been assigned to and then gives them rights in Schoolwires.
What I propose is that the LDAP module be enhanced to support the newer dynamic groups of modern directories. This allows for much easier assignments of users to groups in the directory. Instead of manually having to add all users to groups in the directory you can create dynamic groups that automatically assign the users in your tree based on information contained in the directory(tree).
This makes IT management of these Schoolwires LDAP cross references infinitely more powerful and easier to maintain. You move a user to a new class in your directory, their dynamic group automatically updates and Schoolwires changes their "rights" automatically as well when they log in.