goauthentik / goauthentik/authentik

Add read-only permission for /api/v3/rbac/permissions/users

Open
#12,847 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

**Is your feature request related to a problem? Please describe.**
We have an automated, regular check that compares our Terraform IaC configuration against the actual state of the Authentik setup. The user for this has exclusively read-only permissions to the API. As far as I can tell, accessing `/api/v3/rbac/permissions/users` is not possible without super user privileges.

**Describe the solution you'd like**
Add a permission that allows `GET` on `/api/v3/rbac/permissions/users` without requiring super-user privileges or any other write permissions.

**Describe alternatives you've considered**
Elevating privileges is out of the question.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.