Project

General

Profile

Actions
Copy link

Feature #3140

closed

Add permission which will allow login to IdM directly even if CAS auth is enabled

Added by Roman Kučera over 2 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Roman Kučera
Category:
Authentication / Authorization
Target version:
13.0.0
Start date:
06/23/2022
Due date:
% Done:

100%

Estimated time:
Owner:

Description

Right now you can log in directly to IdM if CAS is enabled only if you are superadmin.
There are use cases, when you want to enable this to some other users to. (migration, 3rd party apps)

LoginController::login is now checking this. So create some new permission and implement the logic there.

hasAnyAuthority is already called during this check so checking for multiple permissions instead only one should be OK from performance perspective.

Actions
Copy link

Also available in: Atom PDF