ajnart / homarr

Customizable browser's home page to interact with your homeserver's Docker containers (e.g. Sonarr/Radarr)
https://homarr.dev
MIT License
5.45k stars 252 forks source link

User permissions get reset #2058

Closed betterthanever2 closed 1 month ago

betterthanever2 commented 1 month ago

Environment

Docker

Version

0.15.3

Describe the problem

After setting up authentication to Homarr with Authentik, I can't figure out the proper way to create/link accounts between the two.

Right now, when a new user logs into Homarr via Authentik, Homarr creates a user object on its side (even if a user with this name already exists). In order to make that new user an admin, I have to disable OIDC, log in as the creator account, navigate to user management, and update user's settings. After re-enabling the OIDC again, things work as expected: the new user does have the admin rights.

However, after some time (or it may be triggered by loading the dashboard on a different device, IDK), the admin permission on that user go away, poof, into thin air.

I'm not even sure where to look for the cause of the issue. Please, advise.

Logs

No response

Context

No response

Please tick the boxes

github-actions[bot] commented 1 month ago

Hi 👋. Thank you for submitting your first issue to Homarr. Please ensure that you've provided all nessesary information. You can use the three dots > Edit button to update your post with additional images and information. Depending on the current volume of requests, the team should get in conact with you shortly.

SeDemal commented 1 month ago

Although it is creating a user in homarr, it purely relies on the OIDC provider even for permissions. You need to set an admin group in your provider and then input that as the environment variable AUTH_OIDC_ADMIN_GROUP. Homarr docs - SSO

betterthanever2 commented 1 month ago

Thank you! Perhaps, this should be emphasized stronger in the docs.