Problem Statement

Radar currently lacks fine-grained user-based access control when exposed via container. This makes it difficult to safely share the service with larger teams or external users, as all users effectively have the same permissions.

It would be nice to have a way to authenticate users (e.g., via Basic Auth or OIDC) and restrict access to resources based on group membership, ensuring users can only see and act on what they are allowed.

Proposed Solution

• Add user authentication support (Basic Auth or OIDC).
• Map user groups to roles or permissions within Radar.
• Enforce these roles when users browse or perform actions.

This would allow secure sharing of Radar with multiple user types while keeping resource access properly restricted.

Alternatives Considered

• External authentication proxies: handle login but don’t integrate with Radar’s internal permissions.

Additional Context

• Enables sharing with larger or external audiences.
• Reduces risk of unauthorized access.