goauthentik / goauthentik/authentik

Role Read only can't access admin interface

Open
#14,512 0 comments 2 reactions 1 assignee Claimed by @gergosimonyi View on GitHub
bug bug/confirmed
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

**Describe the bug**
(If I have understood the intention of the role correctly)
An user added to group **authentik Read-only** can't access admin interface

**To Reproduce**
Steps to reproduce the behavior:

1. add an user to group **authentik Read-only**
2. login with that user
3. there is no **admin interface** button

**Expected behavior**
it should be present the **admin interface** button

**Screenshots**

![Image](https://github.com/user-attachments/assets/5fffe542-76fc-4883-8dbd-e59512c075f5)
there is no button present
![Image](https://github.com/user-attachments/assets/95ca4dbd-24cf-49da-a8d3-551b69539bce)

add permission to fix:

![Image](https://github.com/user-attachments/assets/a0dc77fe-c08d-400b-96ff-f5612f359495)

![Image](https://github.com/user-attachments/assets/250da8f1-119f-45ab-ac65-1d5f1d5e5487)

**Logs**

**Version and Deployment:**

- authentik version: surely 2024.8.2 and onwards
- Deployment: docker-compose

**Additional context**
to fix:
Adding the **access admin interface** permission to the role fix the problem
In the blueprint **Default - RBAC -Read-only** (blueprints/default/rbac-role-read-only.yaml) :

attrs:
permissions: !Enumerate [
!Context goauthentik.io/rbac/models,
SEQ,
!Format [
"%s.view_%s",
!Value 0,
!Index 0,
],
]

It takes all the permissions that contain the string **view**, thus excluding that needed to access the administration interface.
maybe renaming the permission **Can access admin interface** into **Can view admin interface** is the simplest fix

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.