django-DefectDojo
django-DefectDojo copied to clipboard
Default group configuration not working with Oauth2.0
Bug description Currently using DefectDojo version 2.12.0 and trying to add new user signed up using google Oauth2.0 into a default group with some default permission (automatically without any intervention from our side) which is completely possible as per the docs. But somehow this is not working But when I am creating a new user manually then default group configuration is working perfectly fine. Am I missing certain configurations for oauth2.0 users or Default group configuration do not work for user signed up using oauth2.0 ?
Steps to reproduce Steps to reproduce the behavior:
- Create a group and assign some permissions to that group .
- Go to system settings and configure default group settings
- After saving those settings try to signin using oauth2.0
- You will find out that default group is not assigned to the new user.
Expected behavior
A default group should have been assigned to the new user
Deployment method (select with an X
)
- [
X
] Kubernetes Deployment method is kubernetes
Environment information
- DefectDojo version :2.12.0
same was i not able to get it work for google login also.
It seems the Django post_save signal is not working when OAuth2 creates the user. I will have a look at it.
Reopening because it is not fixed yet
Also users created by LDAP do not get assigned to the default group.
Facing same issue, default group not getting assigned while using login with google.