-
-
Notifications
You must be signed in to change notification settings - Fork 1.3k
rbac: add InitialPermissions
#13795
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
rbac: add InitialPermissions
#13795
Conversation
✅ Deploy Preview for authentik-storybook ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
✅ Deploy Preview for authentik-docs canceled.
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
✅ All tests successful. No failed tests found. Additional details and impacted files@@ Coverage Diff @@
## main #13795 +/- ##
==========================================
+ Coverage 92.73% 92.76% +0.03%
==========================================
Files 796 798 +2
Lines 40927 41088 +161
==========================================
+ Hits 37952 38117 +165
+ Misses 2975 2971 -4
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
4e8871b
to
e713771
Compare
authentik PR Installation instructions Instructions for docker-composeAdd the following block to your AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-57a5c88539417e5fc2285e5dbd03a0f2f3ed7168
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s Afterwards, run the upgrade commands from the latest release notes. Instructions for KubernetesAdd the following block to your authentik:
outposts:
container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
image:
repository: ghcr.io/goauthentik/dev-server
tag: gh-57a5c88539417e5fc2285e5dbd03a0f2f3ed7168 Afterwards, run the upgrade commands from the latest release notes. |
e713771
to
6b6b68d
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I need to checkout this and try it for myself to actually fully understand what's going on, but here is a second first impression
This is a powerful construct between Permission and Role to set initial permissions for newly created objects.
752c016
to
57a5c88
Compare
(Note: my force push only fixed a typo in a commit message.) |
* main: (1461 commits) core: bump google-auth from 2.38.0 to v2.39.0 (#14076) core: bump sentry-sdk from 2.25.1 to v2.26.1 (#14079) core: bump prompt-toolkit from 3.0.50 to v3.0.51 (#14078) core: bump boto3 from 1.37.33 to v1.37.34 (#14074) core: bump msgraph-sdk from 1.27.0 to v1.28.0 (#14077) website/docs: fix minor typo in working_with_policies.md (#14071) core, web: update translations (#14064) stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#14065) core: bump goauthentik.io/api/v3 from 3.2025024.4 to 3.2025024.6 (#14069) Small fix for Actual-Budget wiki guide (#14066) root: support db pool (#13534) rbac: add `InitialPermissions` (#13795) web: bump API Client version (#14058) core: Bump django from 5.0.14 to 5.1.8 (#14059) core: bump django-rest-framework from 3.14.0 to 3.16.0 (#14057) policies/reputation: limit reputation score (#14008) ci: fix api-py-publish by disabling poetry cache (#14010) core: bump goauthentik/fips-python from 3.12.9-slim-bookworm-fips to 3.12.10-slim-bookworm-fips (#14044) ci: add NPM packages publish (#13974) root: add packages/ to codeowners (#13975) ...
* main: (93 commits) core: bump google-auth from 2.38.0 to v2.39.0 (#14076) core: bump sentry-sdk from 2.25.1 to v2.26.1 (#14079) core: bump prompt-toolkit from 3.0.50 to v3.0.51 (#14078) core: bump boto3 from 1.37.33 to v1.37.34 (#14074) core: bump msgraph-sdk from 1.27.0 to v1.28.0 (#14077) website/docs: fix minor typo in working_with_policies.md (#14071) core, web: update translations (#14064) stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#14065) core: bump goauthentik.io/api/v3 from 3.2025024.4 to 3.2025024.6 (#14069) Small fix for Actual-Budget wiki guide (#14066) root: support db pool (#13534) rbac: add `InitialPermissions` (#13795) web: bump API Client version (#14058) core: Bump django from 5.0.14 to 5.1.8 (#14059) core: bump django-rest-framework from 3.14.0 to 3.16.0 (#14057) policies/reputation: limit reputation score (#14008) ci: fix api-py-publish by disabling poetry cache (#14010) core: bump goauthentik/fips-python from 3.12.9-slim-bookworm-fips to 3.12.10-slim-bookworm-fips (#14044) ci: add NPM packages publish (#13974) root: add packages/ to codeowners (#13975) ...
This is a powerful construct between Permission and Role to set initial permissions for newly created objects.
Closes #12711