goauthentik / goauthentik/authentik

Application Dashboard keeps stale access after group or policy change

Open
#25,297 1 comment 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 4h
Merged PRs (30d)
634

Description

## What

the user Application Dashboard does not re-evaluate access/expression policies until cache is cleared (stale apps after group or IP-policy change).

## Want

- The user Application Dashboard does not re-evaluate access/expression policies until cache is cleared (stale apps after group or IP-policy change)

## Ideas this came from

- [#24110 Application dashboard remains stale after group membership changes; logout/login no longer refreshes it](https://github.com/goauthentik/authentik/issues/24110) — After adding an existing user to a group that grants access to additional applications, the user's effective access is updated immediately, but the new applicat
- [#25099 User interface Application Dashboard does not evaluate Expression Policy without cache clearing](https://github.com/goauthentik/authentik/issues/25099) — I tried to Hide Apps in Dashboard which will not work when I am connect from WAN (LAN only Apps). To do this I created a Policy evaluating if my seasion has a W

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points. Start by reproducing the Application Dashboard behavior after a group or IP-policy change, then trace where access and expression-policy results are cached. Done means the dashboard re-evaluates access without requiring the cache to be cleared.

Written by the indexing model from the issue text.

Assessment

Domain
authorization
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.