It would be nice to be able to synchronize the membership of groups to the info provided via Oauth.
Lets fix an example, on the redmine system there exist 3 groups, that can be seen via https://my.redmine.org/groups
named supporter, controller, manager. Now the membership to each of these groups is dynamically
assigned via oauth2.
Currently there is the setting Validate user roles to allow overall access and/or admin rights.
The setting Dynamic group membership could just the same way be used to insert a value like roles.redmine where
the following example content
roles: {
redmine: ["supporter", "controller"]
}
would assign the given user to be a member of the supporter and controllergroup.
If JWT contains a group which does not exist in redmine: ignore it
Assignments are absolute, so for this example, in any other groups defined, the user would NOT be a member
It would be nice to be able to synchronize the membership of groups to the info provided via Oauth.
Lets fix an example, on the redmine system there exist 3 groups, that can be seen via https://my.redmine.org/groups named
supporter
,controller
,manager
. Now the membership to each of these groups is dynamically assigned via oauth2.Currently there is the setting
Validate user roles
to allow overall access and/or admin rights.The setting
Dynamic group membership
could just the same way be used to insert a value likeroles.redmine
where the following example contentwould assign the given user to be a member of the
supporter
andcontroller
group.