simpleidserver/SimpleIdServer

Super administrators, realm administrators, and regular users

Closed this issue · 4 comments

qq1176914912 commented

Hello, excuse me, do you have a plan to realize the permission?
For example, a super administrator and a realm administrator can log in to 5002, but only a super administrator can switch between realms and enter different realms, realm administrators cannot switch realms and can only manage their own realm content, and ordinary users cannot log in to 5002 for administrative operations.
The current situation is that all users are equivalent to the super administrator and can log in to 5002 to operate everything.

simpleidserver commented

Hello,

We can develop this feature and include it in the next release. At the moment, we are busy with several tasks:

  • Ensuring compliance with the EBSI conformance test (issuer).
  • Supporting OpenID federation.

When we have finished both tasks, we can work on it. If you feel comfortable with our codebase, you can also contribute to it :)

Kind regards,

SID

qq1176914912 commented

Hello,

We can develop this feature and include it in the next release. At the moment, we are busy with several tasks:

  • Ensuring compliance with the EBSI conformance test (issuer).
  • Supporting OpenID federation.

When we have finished both tasks, we can work on it. If you feel comfortable with our codebase, you can also contribute to it :)

Kind regards,

SID

Thank you for your reply. I understand.

simpleidserver commented
  • Change the URL when the realm is changed : OK
  • Check changes are working for suburl : TODO
  • Assign the client "SIDS-manager" to all the realms : OK
  • Can manage the realms assigned to a user : TODO
  • Can manage the realms assigned to a client : OK
  • In the realm view, add a new tab "Roles" and display the list of roles : TODO
  • Develop a screen to display a role :

Permissions matrix

Component Read only Manage
Clients true true
Scopes true false
  • Update the UI group , rename the tab "Roles" to "Client roles" and add a new one "Realm roles" : TODO
  • Check everything is working without realm : TODO
simpleidserver commented

@qq1176914912 : this feature is developed and will be included in the release 5.0.1