Skip to content

OIDC: Disallow changing admin permissions for oidc users when OIDC group mapping is configured #1037

Description

@jmattheis

When a local user is linked with a oidc identity. Or an oidc identity changes the password. They can still use local login. We currently don't really define a account type, so if the password is set, the user can use local auth. If the oidc_id is set, the user can login via oidc.

With the addition of #1033 the admin permissions are synced on oidc login and we maybe want to restrict changing the admin permissions for oidc users.

We also maybe want to disable local login when the user is linked to an oidc identity.

Metadata

Metadata

Assignees

No one assigned

    Labels

    a:featureNew feature or request

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions