codechecker
codechecker copied to clipboard
CodeChecker internal group membership handling
This is the phase II authorization part of the oauth based authentication #4160
Requirements:
Group adminisration should be only possible with SUPERUSER global permission. See https://github.com/Ericsson/codechecker/blob/master/docs/web/permissions.md#superuser
It should be possible to add users (by an admin) in the web GUI of CodeChecker. It should be possible to add groups too. It should be possible to assign users to groups. group memberships shoudl be stored in the database It should be possible to list group memberships. It should be possible to list users with the last login date.
The user can define a list of groups of which the users must be a member of to log in in
server_config.json
:
"authentication": {
"enabled" : true,
"realm_name" : "CodeChecker Privileged server",
"realm_error" : "Access requires valid credentials.",
"session_lifetime" : 300,
"refresh_time" : 60,
"logins_until_cleanup" : 30,
"allowed_groups" : ["users","admins"]
If the list is empty, all users are allowed to log in.
Minimum required fields for user addition to a group: Email address (unique identifier of a user)