django-DefectDojo icon indicating copy to clipboard operation
django-DefectDojo copied to clipboard

Default group configuration not working with Oauth2.0

Open Anubhav357 opened this issue 2 years ago • 5 comments

Bug description Currently using DefectDojo version 2.12.0 and trying to add new user signed up using google Oauth2.0 into a default group with some default permission (automatically without any intervention from our side) which is completely possible as per the docs. But somehow this is not working But when I am creating a new user manually then default group configuration is working perfectly fine. Am I missing certain configurations for oauth2.0 users or Default group configuration do not work for user signed up using oauth2.0 ?

Steps to reproduce Steps to reproduce the behavior:

  1. Create a group and assign some permissions to that group .
  2. Go to system settings and configure default group settings
  3. After saving those settings try to signin using oauth2.0
  4. You will find out that default group is not assigned to the new user.

Expected behavior A default group should have been assigned to the new user Deployment method (select with an X)

  • [X ] Kubernetes Deployment method is kubernetes

Environment information

  • DefectDojo version :2.12.0

Anubhav357 avatar Jul 29 '22 10:07 Anubhav357

same was i not able to get it work for google login also.

SastAccount avatar Jul 29 '22 11:07 SastAccount

It seems the Django post_save signal is not working when OAuth2 creates the user. I will have a look at it.

StefanFl avatar Aug 03 '22 04:08 StefanFl

Reopening because it is not fixed yet

StefanFl avatar Aug 03 '22 06:08 StefanFl

Also users created by LDAP do not get assigned to the default group.

lme-nca avatar Aug 16 '22 14:08 lme-nca

Facing same issue, default group not getting assigned while using login with google.

nuc13us avatar Aug 23 '22 06:08 nuc13us