Skip to content

OIDC: Disallow changing admin permissions for oidc users when OIDC group mapping is configured #1037

Description

@jmattheis

When a local user is linked with a oidc identity. Or an oidc identity changes the password. They can still use local login. We currently don't really define a account type, so if the password is set, the user can use local auth. If the oidc_id is set, the user can login via oidc.

With the addition of #1033 the admin permissions are synced on oidc login and we maybe want to restrict changing the admin permissions for oidc users.

We also maybe want to disable local login when the user is linked to an oidc identity.

Metadata

Metadata

Assignees

No one assigned

    Labels

    a:featureNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions