search

ajnart / homarr

Customizable browser's home page to interact with your homeserver's Docker containers (e.g. Sonarr/Radarr)
https://homarr.dev
MIT License
6.14k stars 282 forks source link

Disable Docker integration on boards #2120

Open kalipso-cyber opened 2 months ago

kalipso-cyber commented 2 months ago

Description

I'd love it if we could restrict the access to Docker on specific boards. Currently, per my understanding, each board automatically comes with the Docker "tile" in the upper right corner (next to the Edit Mode), which enables anybody with access to the board to manage all Docker services running on the same host

Thinking in terms of security and practicability, it might be nice to be able to remove that tile from certain boards if we know the users accessing that board won't have a need to mess around with Docker applications (e.g., they just need some links to internal services).

Does that make sense and if so, would it be possible to implement this (after the release of 1.0)?

Either way, thanks to everyone working on this project for putting in them time and providing it to us free of charge!

Priority

Low (Nice-to-have)

github-actions[bot] commented 2 months ago

Hi 👋. Thank you for submitting your first issue to Homarr. Please ensure that you've provided all nessesary information. You can use the three dots > Edit button to update your post with additional images and information. Depending on the current volume of requests, the team should get in conact with you shortly.

SeDemal commented 2 months ago

I don't personally use or have coded on that part at all, but from what I remember, only admin's have access to the docker page. The button is present according to the user, not the board. If you're an admin, it'll show up everywhere, yes, if you're not, then you shouldn't have it. At least that's the behavior I would expect we'd have implemented, please inform us if that is not the case.

kalipso-cyber commented 1 month ago

Oh I see, thanks for clarifying. I'll verify and let you know if the button is indeed present for non-admin users as well.