Skip to content

rbac: add InitialPermissions #13795

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 6 commits into from
Apr 14, 2025

Conversation

gergosimonyi
Copy link
Collaborator

This is a powerful construct between Permission and Role to set initial permissions for newly created objects.

Closes #12711

Copy link

netlify bot commented Apr 7, 2025

Deploy Preview for authentik-storybook ready!

Name Link
🔨 Latest commit 57a5c88
🔍 Latest deploy log https://app.netlify.com/sites/authentik-storybook/deploys/67fd160a98847000089065c7
😎 Deploy Preview https://deploy-preview-13795--authentik-storybook.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Copy link

netlify bot commented Apr 7, 2025

Deploy Preview for authentik-docs canceled.

Name Link
🔨 Latest commit 57a5c88
🔍 Latest deploy log https://app.netlify.com/sites/authentik-docs/deploys/67fd160aa7ad6d0007267a66

Copy link

codecov bot commented Apr 7, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.76%. Comparing base (a07fd8d) to head (57a5c88).
Report is 10 commits behind head on main.

✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #13795      +/-   ##
==========================================
+ Coverage   92.73%   92.76%   +0.03%     
==========================================
  Files         796      798       +2     
  Lines       40927    41088     +161     
==========================================
+ Hits        37952    38117     +165     
+ Misses       2975     2971       -4     
Flag Coverage Δ
e2e 47.86% <32.86%> (-0.09%) ⬇️
integration 24.14% <14.08%> (-0.04%) ⬇️
unit 90.56% <100.00%> (+0.04%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@gergosimonyi gergosimonyi force-pushed the rbac/set-own-permissions-on-object-creation branch 2 times, most recently from 4e8871b to e713771 Compare April 9, 2025 09:26
Copy link
Contributor

github-actions bot commented Apr 9, 2025

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-57a5c88539417e5fc2285e5dbd03a0f2f3ed7168
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-57a5c88539417e5fc2285e5dbd03a0f2f3ed7168

Afterwards, run the upgrade commands from the latest release notes.

@gergosimonyi gergosimonyi force-pushed the rbac/set-own-permissions-on-object-creation branch from e713771 to 6b6b68d Compare April 9, 2025 11:20
@gergosimonyi gergosimonyi marked this pull request as ready for review April 9, 2025 11:37
@gergosimonyi gergosimonyi requested review from a team as code owners April 9, 2025 11:37
Copy link
Member

@rissson rissson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I need to checkout this and try it for myself to actually fully understand what's going on, but here is a second first impression

@gergosimonyi gergosimonyi requested a review from rissson April 14, 2025 14:01
@gergosimonyi gergosimonyi force-pushed the rbac/set-own-permissions-on-object-creation branch from 752c016 to 57a5c88 Compare April 14, 2025 14:04
@gergosimonyi
Copy link
Collaborator Author

(Note: my force push only fixed a typo in a commit message.)

@gergosimonyi gergosimonyi merged commit 03d5dad into main Apr 14, 2025
91 checks passed
@gergosimonyi gergosimonyi deleted the rbac/set-own-permissions-on-object-creation branch April 14, 2025 15:55
kensternberg-authentik added a commit that referenced this pull request Apr 15, 2025
* main: (1461 commits)
  core: bump google-auth from 2.38.0 to v2.39.0 (#14076)
  core: bump sentry-sdk from 2.25.1 to v2.26.1 (#14079)
  core: bump prompt-toolkit from 3.0.50 to v3.0.51 (#14078)
  core: bump boto3 from 1.37.33 to v1.37.34 (#14074)
  core: bump msgraph-sdk from 1.27.0 to v1.28.0 (#14077)
  website/docs: fix minor typo in working_with_policies.md (#14071)
  core, web: update translations (#14064)
  stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#14065)
  core: bump goauthentik.io/api/v3 from 3.2025024.4 to 3.2025024.6 (#14069)
  Small fix for Actual-Budget wiki guide (#14066)
  root: support db pool (#13534)
  rbac: add `InitialPermissions` (#13795)
  web: bump API Client version (#14058)
  core: Bump django from 5.0.14 to 5.1.8 (#14059)
  core: bump django-rest-framework from 3.14.0 to 3.16.0 (#14057)
  policies/reputation: limit reputation score (#14008)
  ci: fix api-py-publish by disabling poetry cache (#14010)
  core: bump goauthentik/fips-python from 3.12.9-slim-bookworm-fips to 3.12.10-slim-bookworm-fips (#14044)
  ci: add NPM packages publish (#13974)
  root: add packages/ to codeowners (#13975)
  ...
kensternberg-authentik added a commit that referenced this pull request Apr 25, 2025
* main: (93 commits)
  core: bump google-auth from 2.38.0 to v2.39.0 (#14076)
  core: bump sentry-sdk from 2.25.1 to v2.26.1 (#14079)
  core: bump prompt-toolkit from 3.0.50 to v3.0.51 (#14078)
  core: bump boto3 from 1.37.33 to v1.37.34 (#14074)
  core: bump msgraph-sdk from 1.27.0 to v1.28.0 (#14077)
  website/docs: fix minor typo in working_with_policies.md (#14071)
  core, web: update translations (#14064)
  stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#14065)
  core: bump goauthentik.io/api/v3 from 3.2025024.4 to 3.2025024.6 (#14069)
  Small fix for Actual-Budget wiki guide (#14066)
  root: support db pool (#13534)
  rbac: add `InitialPermissions` (#13795)
  web: bump API Client version (#14058)
  core: Bump django from 5.0.14 to 5.1.8 (#14059)
  core: bump django-rest-framework from 3.14.0 to 3.16.0 (#14057)
  policies/reputation: limit reputation score (#14008)
  ci: fix api-py-publish by disabling poetry cache (#14010)
  core: bump goauthentik/fips-python from 3.12.9-slim-bookworm-fips to 3.12.10-slim-bookworm-fips (#14044)
  ci: add NPM packages publish (#13974)
  root: add packages/ to codeowners (#13975)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Set default RBAC permissions for new objects
3 participants