OpenConext / OpenConext/OpenConext-access
admin access via invite role
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 4
- Forks
- 0
- Avg merge
- 1d 14h
- Merged PRs (30d)
- 22
Description
In addition of specifying admin user ids in the config super-admin.users, I would like to be able to specify an Invite role (i.e., isMemberOf claim).
So I probose adding a super-admin.roles. Any user with a isMemberOf claim that includes one of values specified there, should become super-admin.
It is probably useful to keep the current super-admin.users mechanism, which is easier for testing locally and on test2, and might serve as a backup.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the code that reads the super-admin.users configuration and evaluates the isMemberOf claim. Trace how super-admin status is assigned, then add support for super-admin.roles while preserving the existing user-ID mechanism. Done means matching role values grant super-admin access and the current user-ID path still works.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- authorization
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100