Actions
Feature #3140
closed
Add permission which will allow login to IdM directly even if CAS auth is enabled
Status:
Closed
Priority:
Normal
Assignee:
Roman Kučera
Category:
Authentication / Authorization
Target version:
Start date:
06/23/2022
Due date:
% Done:
100%
Estimated time:
Owner:
Description
Right now you can log in directly to IdM if CAS is enabled only if you are superadmin.
There are use cases, when you want to enable this to some other users to. (migration, 3rd party apps)
LoginController::login is now checking this. So create some new permission and implement the logic there.
hasAnyAuthority is already called during this check so checking for multiple permissions instead only one should be OK from performance perspective.
Actions