Skip to content

Conversation

@rhafer
Copy link
Contributor

@rhafer rhafer commented Sep 24, 2025

Closes #1458

For reviewing it's probably easier to look into the individual commits.

requires: opencloud-eu/reva#360

rhafer added 7 commits October 2, 2025 12:04
When enabled the graph service refuses to start with the "ldap" backend.
Additional enforcements will follow in subsequent commits.
Make the account resolve reject users without a tenantid, when
multi-tenancy is enabled.
This allows to pass the multi-tenant enablement flag as a shared config
option to the reva service. This needs to be done for all reva services
since it ends up in a global variable in reva that is only initialized
once, by the service that is the first to parse its config.
See opencloud-eu#1563 for details.
The reva auth-middleware blocks users without a tenant id, expect
system users.
@rhafer rhafer marked this pull request as ready for review October 2, 2025 10:11
Copy link
Contributor

@dragonchaser dragonchaser left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@rhafer rhafer merged commit 9ec532d into opencloud-eu:main Oct 6, 2025
58 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Introduce a multi-tenancy enablement configuration switch

2 participants