search

blabla1337 / skf-flask

Security Knowledge Framework (SKF) Python Flask / Angular project
https://www.securityknowledgeframework.org
Apache License 2.0
805 stars 308 forks source link

removing user accounts via gui #743

Closed Melgan closed 2 years ago

Melgan commented 3 years ago

Hello, I'm unable to remove user account via gui. When I go to users tab, click on trash bit I have: Revoke Access × Type REVOKE to revoke the access of the user

but when I type it nothing happend

github-actions[bot] commented 3 years ago

Thank you for creating an issue ticket for our SKF project, we highly appriciate the feedback so we can improve the project and make it more awesome for everyone! We will shortly come back to you after the evaluation of the issue.

blabla1337 commented 2 years ago

We actually changed the users and accounts setup in the new to be released SKF version. Default it will not have any users or roles. If you would like to then you need to use the SSO implementation using our Keycloak and Kraken approach. You can have a look in the SOO branch to see how we have setup this.

cptfixit commented 1 year ago

"If you would like to then you need to use the SSO implementation using our Keycloak and Kraken approach"

This is not implied in the documentation anywhere. The documentation also does not explain the current process of setting up a user, nor does the documentation include instructions on setting up SSO.

I've been adding user accounts via the GUI, but I assume that these users are supposed to receive an email with their token and UID. The documentation also does not explain how an SMTP connection should be configured to make these email possible, nor does it detail how to manually enable the users if email is not an option.

EDIT: Comparing the UI between the online demo and the app that's deployed via docker-compose, it seems I'm looking at much older code, without the Kraken options. I'll try and find out how the heck I get the newer version of the app, with SSO/Kraken, in this deployment method

EDIT 2: By using the 4.1.0 API container and the 4.1.0-sso angular container I could run the SSO-enabled version of SKF in my docker-compose setup. Unfortunately this points to the Internet-based solution and doesn't allow me to use local users in any way.