[Bug]: Admin permission goes back to false everytime the user login with their google account #580

Closed
opened 2026-02-04 20:25:57 +03:00 by OVERLORD · 2 comments
Owner

Originally created by @Cybrarist on GitHub (Oct 2, 2024).

Where is the problem occurring?

I encountered the problem while interacting with the server (Backend)

What browsers are you seeing the problem on?

Chrome, Firefox, Safari

Current behaviour

if i have a user called A, A logs in with this account using google SSO for the first time.
then i change the status of user A to be an admin in the board.
user A gets the the admin rights after refreshing the page.

if user A logs out, then logs in again using google SSO, the admin is reset back to false.

Desired behaviour

No response

Steps to reproduce

  1. login with google account
  2. change the status of user from database (is_admin=true), or from frontend
  3. logout
  4. login with google again
  5. admin reset back to false

Other information

No response

Originally created by @Cybrarist on GitHub (Oct 2, 2024). ### Where is the problem occurring? I encountered the problem while interacting with the server (Backend) ### What browsers are you seeing the problem on? Chrome, Firefox, Safari ### Current behaviour if i have a user called A, A logs in with this account using google SSO for the first time. then i change the status of user A to be an admin in the board. user A gets the the admin rights after refreshing the page. if user A logs out, then logs in again using google SSO, the admin is reset back to false. ### Desired behaviour _No response_ ### Steps to reproduce 1. login with google account 2. change the status of user from database (is_admin=true), or from frontend 3. logout 4. login with google again 5. admin reset back to false ### Other information _No response_
Author
Owner

@meltyshev commented on GitHub (Oct 2, 2024):

Hi! This is the expected behaviour unless OIDC_IGNORE_ROLES=true is set. Also, in this case, it shouldn't even be possible to change the role via UI or API. So, to resolve this, you need to add the OIDC_IGNORE_ROLES=true environment variable, and then the role will no longer be synchronized during login.

@meltyshev commented on GitHub (Oct 2, 2024): Hi! This is the expected behaviour unless `OIDC_IGNORE_ROLES=true` is set. Also, in this case, it shouldn't even be possible to change the role via UI or API. So, to resolve this, you need to add the `OIDC_IGNORE_ROLES=true` environment variable, and then the role will no longer be synchronized during login.
Author
Owner

@Cybrarist commented on GitHub (Oct 3, 2024):

my apologies, i haven't seen it.

@Cybrarist commented on GitHub (Oct 3, 2024): my apologies, i haven't seen it.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/planka#580