Skip to content

Role Read only can't access admin interface #14512

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
maraMAUgit opened this issue May 14, 2025 · 0 comments
Open

Role Read only can't access admin interface #14512

maraMAUgit opened this issue May 14, 2025 · 0 comments
Labels
bug/confirmed Confirmed bugs bug Something isn't working

Comments

@maraMAUgit
Copy link

maraMAUgit commented May 14, 2025

Describe the bug
(If I have understood the intention of the role correctly)
An user added to group authentik Read-only can't access admin interface

To Reproduce
Steps to reproduce the behavior:

  1. add an user to group authentik Read-only
  2. login with that user
  3. there is no admin interface button

Expected behavior
it should be present the admin interface button

Screenshots

Image
there is no button present
Image

add permission to fix:

Image

Image

Logs

Version and Deployment:

  • authentik version: surely 2024.8.2 and onwards
  • Deployment: docker-compose

Additional context
to fix:
Adding the access admin interface permission to the role fix the problem
In the blueprint Default - RBAC -Read-only (blueprints/default/rbac-role-read-only.yaml) :

attrs:
  permissions: !Enumerate [
      !Context goauthentik.io/rbac/models,
      SEQ,
      !Format [
          "%s.view_%s",
          !Value 0,
          !Index 0,
      ],
  ]

It takes all the permissions that contain the string view, thus excluding that needed to access the administration interface.
maybe renaming the permission Can access admin interface into Can view admin interface is the simplest fix

@maraMAUgit maraMAUgit added the bug Something isn't working label May 14, 2025
@BeryJu BeryJu added the bug/confirmed Confirmed bugs label May 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug/confirmed Confirmed bugs bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants