fix

apps/dolibarr/application.tf

@@ -34,6 +34,14 @@ resource "authentik_application" "dolibarr_application_ldap" {
   meta_launch_url   = "blank://blank"
 }
 
+resource "authentik_policy_expression" "policy" {
+  name       = local.main-group
+  expression = <<-EOF
+    attr = request.user.group_attributes()
+    return attr['${local.app-name}'] if '${local.app-name}' in attr else False
+  EOF
+}
+
 resource "authentik_policy_binding" "dolibarr_ldap_access_users" {
   target = authentik_application.dolibarr_application_ldap.uuid
   policy = authentik_policy_expression.policy.id