cBioPortal / cbioportal

cBioPortal for Cancer Genomics
https://cbioportal.org
GNU Affero General Public License v3.0
631 stars 480 forks source link

Enhance roles filtering in OAuth2SecurityConfig.java #10749

Open MuhannadBaraghith opened 5 months ago

MuhannadBaraghith commented 5 months ago

- Description:

I have configured cBioPortal for OAuth2 authentication and would like to grant access to users based on specific roles. Currently, there isn't a straightforward way to filter roles in OAuth2SecurityConfig.java. I propose adding a feature to filter roles in this configuration file, potentially based on environment variables.

- Steps to Reproduce:

  1. Configure cBioPortal for OAuth2 authentication.
  2. Attempt to filter roles in OAuth2SecurityConfig.java.
  3. Notice the absence of a mechanism to filter filter roles based on environment variables.

- Expected Behaviour:

OAuth2SecurityConfig.java should provide functionality to filter roles based on certain environment variables, allowing for more granular access control.

- Additional information:

This enhancement would greatly improve access control within cBioPortal and align with best practices for OAuth2 authentication.

Your input and assistance on implementing this feature would be highly appreciated.

Thank you