OIDC Authentication: Disable editing of users' key attribtues #2928

New Issue

OVERLORD · 2026-02-05T05:45:41+03:00

OVERLORD commented

2026-02-05 05:45:41 +03:00

Originally created by @mschaefers on GitHub (Jul 28, 2022).

Describe the feature you'd like

A user that authenticated via OIDC is still able to edit name and email address, although these values were initally provided by the authenticating server.

Editing these files should be disabled for OIDC provisioned users. Either automatically or configurable by the instance administrator

Describe the benefits this would bring to existing BookStack users

a user email is considered a key attribute or a constant when this data is provided by an external provider.

User should not have the ability to tamper this data in bookstack.

Can the goal of this request already be achieved via other means?

No

Have you searched for an existing open/closed issue?

I have searched for existing issues and none cover my fundemental request

How long have you been using BookStack?

Not using yet, just scoping

Additional context

No response

Originally created by @mschaefers on GitHub (Jul 28, 2022). ### Describe the feature you'd like A user that authenticated via OIDC is still able to edit name and email address, although these values were initally provided by the authenticating server. Editing these files should be disabled for OIDC provisioned users. Either automatically or configurable by the instance administrator ### Describe the benefits this would bring to existing BookStack users a user email is considered a key attribute or a constant when this data is provided by an external provider. User should not have the ability to tamper this data in bookstack. ### Can the goal of this request already be achieved via other means? No ### Have you searched for an existing open/closed issue? - [X] I have searched for existing issues and none cover my fundemental request ### How long have you been using BookStack? Not using yet, just scoping ### Additional context _No response_

OVERLORD added the 🔨 Feature Request label 2026-02-05 05:45:41 +03:00

OVERLORD closed this issue

2026-02-05 05:45:45 +03:00

OVERLORD commented

2026-02-05 05:45:55 +03:00

@ssddanbrown commented on GitHub (Jul 28, 2022):

Hi @mschaefers,

The email address is only editable by those with the Manage Users permission.
In regards to the user's name, There has not been much previous demand for controlling this field so I'm not sure it'd be worth adding such a feature.

@ssddanbrown commented on GitHub (Jul 28, 2022): Hi @mschaefers, The email address is only editable by those with the `Manage Users` permission. In regards to the user's name, There has not been much previous demand for controlling this field so I'm not sure it'd be worth adding such a feature.

OVERLORD referenced this issue

2026-02-05 10:24:20 +03:00

[PR #2928] [MERGED] Convert old BrowserKit tests #6092

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/BookStack#2928