openstad / openstad-oauth2-server

MIT License
0 stars 8 forks source link

Admin login (Trello ticket 233) #29

Closed stijnvandervegt closed 4 years ago

stijnvandervegt commented 4 years ago

Add check if the user have a privilegeRole for the given clientId. See Trello ticket: https://trello.com/c/C9kpwftZ/233-admin-login-geef-foutmelding-bij-het-inloggen-als-een-gebruiker-g%C3%A9%C3%A9n-admin-is-voor-de-specifieke-site

Question: The admin panel is always linked to one oauth client? So only users with privilege roles for this client can access the admin panel?

ToshKoevoets commented 4 years ago

Yes currently no superadmin role, but admin panel has it's own client. I can Imagine it might be better in furutre to move to a system of superadmin who can access everything and admin, editor, moderator rights automatically work with admin panel, so you only see the sites you are allowed to