WeblateOrg / WeblateOrg/weblate

Map OIDC roles/groups to weblate groups

Open
#11,286 3 comments 6 reactions 0 assignees View on GitHub
Area: Auth enhancement Waiting for: Demand
Dominant language
Python
Stars
6.1k
Forks
1.4k
Avg merge
9h 53m
Merged PRs (30d)
395

Description

### Describe the problem

Weblate has already an extensive role-based access management. However, it seems that currently it's not possible to map roles or groups coming from an OIDC provider to internal ones.

### Describe the solution you would like

Other tools with OIDC provide the functionality of mappers like for example here in the ArgoCD documentation: https://argo-cd.readthedocs.io/en/stable/operator-manual/user-management/zitadel/#argocd-rbac-cmyaml and https://argo-cd.readthedocs.io/en/stable/operator-manual/rbac/#policy-csv-composition

It should have a configuration option to specify relations between a role/group of OIDC so on registration (and maybe even on subsequent logins) the user will get the corresponding weblate group automatically.

Also, an option should be considered that if no role is matched the access should be prevented.

### Describe alternatives you have considered

_No response_

### Screenshots

_No response_

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.