Allow to disable user and group management
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 36.9k
- Forks
- 5.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 713
Description
When user and group management is delegated to a third party service (LDAP, OIDC etc.), on might want to disable the user and group management feature in nextcloud.
A real life example that happened to me last week: I have a nextcloud installation using nextcloud-oidc-login. This plugins set the groups in a OIDC token, thus user group membership is always reset at login. A user complained to me that users kept leaving the groups he created with the nextcloud interface. I explained him that user and group management should be done in the OIDC server, but I would also disable the user and group management in the nextcloud interface to avoid future issues like this.
TL;DR: I suggest implementing a configuration option to enable/disable user and group management in nextcloud.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the existing user and group management entry points and the configuration handling for administrative features. Review how delegated LDAP or OIDC setups interact with those interfaces, then define the configuration behavior and verify that user and group management can be disabled without affecting authentication.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authorization
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100