Skip to content

rbac: add InitialPermissions#13795

Merged
gergosimonyi merged 6 commits intomainfrom
rbac/set-own-permissions-on-object-creation
Apr 14, 2025
Merged

rbac: add InitialPermissions#13795
gergosimonyi merged 6 commits intomainfrom
rbac/set-own-permissions-on-object-creation

Conversation

@gergosimonyi
Copy link
Collaborator

This is a powerful construct between Permission and Role to set initial permissions for newly created objects.

Closes #12711

@netlify
Copy link

netlify bot commented Apr 7, 2025

Deploy Preview for authentik-storybook ready!

Name Link
🔨 Latest commit 57a5c88
🔍 Latest deploy log https://app.netlify.com/sites/authentik-storybook/deploys/67fd160a98847000089065c7
😎 Deploy Preview https://deploy-preview-13795--authentik-storybook.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@netlify
Copy link

netlify bot commented Apr 7, 2025

Deploy Preview for authentik-docs canceled.

Name Link
🔨 Latest commit 57a5c88
🔍 Latest deploy log https://app.netlify.com/sites/authentik-docs/deploys/67fd160aa7ad6d0007267a66

@codecov
Copy link

codecov bot commented Apr 7, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.76%. Comparing base (a07fd8d) to head (57a5c88).
Report is 10 commits behind head on main.

✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #13795      +/-   ##
==========================================
+ Coverage   92.73%   92.76%   +0.03%     
==========================================
  Files         796      798       +2     
  Lines       40927    41088     +161     
==========================================
+ Hits        37952    38117     +165     
+ Misses       2975     2971       -4     
Flag Coverage Δ
e2e 47.86% <32.86%> (-0.09%) ⬇️
integration 24.14% <14.08%> (-0.04%) ⬇️
unit 90.56% <100.00%> (+0.04%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@gergosimonyi gergosimonyi force-pushed the rbac/set-own-permissions-on-object-creation branch 2 times, most recently from 4e8871b to e713771 Compare April 9, 2025 09:26
@github-actions
Copy link
Contributor

github-actions bot commented Apr 9, 2025

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-57a5c88539417e5fc2285e5dbd03a0f2f3ed7168
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-57a5c88539417e5fc2285e5dbd03a0f2f3ed7168

Afterwards, run the upgrade commands from the latest release notes.

@gergosimonyi gergosimonyi force-pushed the rbac/set-own-permissions-on-object-creation branch from e713771 to 6b6b68d Compare April 9, 2025 11:20
@gergosimonyi gergosimonyi marked this pull request as ready for review April 9, 2025 11:37
@gergosimonyi gergosimonyi requested review from a team as code owners April 9, 2025 11:37
Copy link
Member

@rissson rissson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I need to checkout this and try it for myself to actually fully understand what's going on, but here is a second first impression

@gergosimonyi gergosimonyi requested a review from rissson April 14, 2025 14:01
@gergosimonyi gergosimonyi force-pushed the rbac/set-own-permissions-on-object-creation branch from 752c016 to 57a5c88 Compare April 14, 2025 14:04
@gergosimonyi
Copy link
Collaborator Author

(Note: my force push only fixed a typo in a commit message.)

@gergosimonyi gergosimonyi merged commit 03d5dad into main Apr 14, 2025
91 checks passed
@gergosimonyi gergosimonyi deleted the rbac/set-own-permissions-on-object-creation branch April 14, 2025 15:55
kensternberg-authentik added a commit that referenced this pull request Apr 15, 2025
* main: (1461 commits)
  core: bump google-auth from 2.38.0 to v2.39.0 (#14076)
  core: bump sentry-sdk from 2.25.1 to v2.26.1 (#14079)
  core: bump prompt-toolkit from 3.0.50 to v3.0.51 (#14078)
  core: bump boto3 from 1.37.33 to v1.37.34 (#14074)
  core: bump msgraph-sdk from 1.27.0 to v1.28.0 (#14077)
  website/docs: fix minor typo in working_with_policies.md (#14071)
  core, web: update translations (#14064)
  stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#14065)
  core: bump goauthentik.io/api/v3 from 3.2025024.4 to 3.2025024.6 (#14069)
  Small fix for Actual-Budget wiki guide (#14066)
  root: support db pool (#13534)
  rbac: add `InitialPermissions` (#13795)
  web: bump API Client version (#14058)
  core: Bump django from 5.0.14 to 5.1.8 (#14059)
  core: bump django-rest-framework from 3.14.0 to 3.16.0 (#14057)
  policies/reputation: limit reputation score (#14008)
  ci: fix api-py-publish by disabling poetry cache (#14010)
  core: bump goauthentik/fips-python from 3.12.9-slim-bookworm-fips to 3.12.10-slim-bookworm-fips (#14044)
  ci: add NPM packages publish (#13974)
  root: add packages/ to codeowners (#13975)
  ...
kensternberg-authentik added a commit that referenced this pull request Apr 25, 2025
* main: (93 commits)
  core: bump google-auth from 2.38.0 to v2.39.0 (#14076)
  core: bump sentry-sdk from 2.25.1 to v2.26.1 (#14079)
  core: bump prompt-toolkit from 3.0.50 to v3.0.51 (#14078)
  core: bump boto3 from 1.37.33 to v1.37.34 (#14074)
  core: bump msgraph-sdk from 1.27.0 to v1.28.0 (#14077)
  website/docs: fix minor typo in working_with_policies.md (#14071)
  core, web: update translations (#14064)
  stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#14065)
  core: bump goauthentik.io/api/v3 from 3.2025024.4 to 3.2025024.6 (#14069)
  Small fix for Actual-Budget wiki guide (#14066)
  root: support db pool (#13534)
  rbac: add `InitialPermissions` (#13795)
  web: bump API Client version (#14058)
  core: Bump django from 5.0.14 to 5.1.8 (#14059)
  core: bump django-rest-framework from 3.14.0 to 3.16.0 (#14057)
  policies/reputation: limit reputation score (#14008)
  ci: fix api-py-publish by disabling poetry cache (#14010)
  core: bump goauthentik/fips-python from 3.12.9-slim-bookworm-fips to 3.12.10-slim-bookworm-fips (#14044)
  ci: add NPM packages publish (#13974)
  root: add packages/ to codeowners (#13975)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Set default RBAC permissions for new objects

3 participants