Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

A way to flag a user to disallow giving them permissions in DAB RBAC #445

Open
AlanCoding opened this issue Jun 10, 2024 · 1 comment
Open
Assignees
Labels
app:rbac enhancement New feature or request

Comments

@AlanCoding
Copy link
Member

You shouldn't be able to give permissions to the "_system" user.

We have an implementation of this existing now which is the managed boolean flag. However, DAB RBAC should probably not know about this specifically. In either case, we should have some documented means of adding a method or something to the user model to prevent giving permissions to an individual user.

@AlanCoding
Copy link
Member Author

Wondering...

Would it perhaps make more sense for the app to provide a method that filters a user queryset, excluding the users who cannot have permissions assigned? I'm undecided.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
app:rbac enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants