Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CodeChecker internal group membership handling #4302

Open
dkrupp opened this issue Jul 31, 2024 · 0 comments
Open

CodeChecker internal group membership handling #4302

dkrupp opened this issue Jul 31, 2024 · 0 comments

Comments

@dkrupp
Copy link
Member

dkrupp commented Jul 31, 2024

This is the phase II authorization part of the oauth based authentication #4160

Requirements:

Group adminisration should be only possible with SUPERUSER global permission. See https://github.com/Ericsson/codechecker/blob/master/docs/web/permissions.md#superuser

It should be possible to add users (by an admin) in the web GUI of CodeChecker.
It should be possible to add groups too.
It should be possible to assign users to groups.
group memberships shoudl be stored in the database
It should be possible to list group memberships.
It should be possible to list users with the last login date.

The user can define a list of groups of which the users must be a member of to log in in
server_config.json :

  "authentication": {
    "enabled" : true,
    "realm_name" : "CodeChecker Privileged server",
    "realm_error" : "Access requires valid credentials.",
    "session_lifetime" : 300,
    "refresh_time" : 60,
    "logins_until_cleanup" : 30,
    "allowed_groups" : ["users","admins"]

If the list is empty, all users are allowed to log in.

Minimum required fields for user addition to a group:
Email address (unique identifier of a user)

@dkrupp dkrupp changed the title CodeChecker group membership handling CodeChecker internal group membership handling Jul 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant