709e413e46
While for role memberships, it is true that they are only applied for _direct_ memberships, this does not appear to be the case for attributes (which is good as this also follows the "Hierarchy" system documented in the same file). In terms of the implementation, this is the case due to the call to `all_groups()` in3d5a189fa7/authentik/core/models.py (L312-L313), introduced in https://github.com/goauthentik/authentik/pull/6017. Looking through the files in there, it is clear that this line in the documentation is from before that point:95e60a035d/website/docs/user-group/group.md (L15). tl;dr: the documentation was correct before #6017, but is now out of date. This change fixes that. Signed-off-by: Zuri Klaschka <pklaschka@users.noreply.github.com>