goauthentik / goauthentik/authentik
Authentik v2025.10.2: bug with role global permission ?
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 644
Description
### Describe the bug
I:
- created a role named 'role-test'
- assigned these global permissions to 'role-test':
- Can view user
- Can view Invitation
- Can assign permission to role
- Can unassign permission to role
- created a group named 'grp-test'
- assigned the role 'role-test' to the group 'grp-test'
- created a user 'user-test'
- added the user 'user-test' to the groupe 'grp-test'
- created an API token to the user 'user-test'
When I execute API calls to list users or invitations : it works
I try to assign role permission on a user calling the API endpoint `/api/v3/rbac/permissions/assigned_by_roles/{uuid}/assign/` but I receive the error: _You do not have permission to perform this action._
I tried to add another global permissions:
- Can assign permission to user
- Can unassign permission to user
- Can change user
- Can view role
But the problem is still the same.
Is it a bug? Or should I add another permission?
### How to reproduce
- create a role named 'role-test'
- assign these global permissions to 'role-test':
- Can view user
- Can view Invitation
- Can assign permission to role
- Can unassign permission to role
- create a group named 'grp-test'
- assign the role 'role-test' to the group 'grp-test'
- create a user 'user-test'
- add the user 'user-test' to the groupe 'grp-test'
- create an API token to the user 'user-test'
- execute an API call `POST` on the endpoint `/api/v3/rbac/permissions/assigned_by_roles/{uuid}/assign/`
### Expected behavior
I would like to be able to give the permissions I want on my user using a permission assign to my role 'role-test'.
### Screenshots
_No response_
### Additional context
_No response_
### Deployment Method
Docker
### Version
2025.10.2
### Relevant log output
```shell
```
Contributor guide
Assessment
This issue has not been assessed yet.