Skip to content

Allow strict proxy roles #22758

@kabsdk

Description

@kabsdk

Describe what you are trying to accomplish and why in non technical terms
I want to be able to restrict all users, who are not in specifically mapped role groups, to be denied access to frigate. What some people would call "strict" role mapping.

Describe the solution you'd like
I would like to be able to set default_role to something like "disabled" or maybe an entirely different disable_default_role flag:

proxy:
  header_map:
    user: x-forwarded-user
    role: x-forwarded-groups
    role_map:
      admin:
        - sysadmins
        - access-level-security
      viewer:
        - camera-viewer
  default_role: "disable"
  # or
  disable_default_role: true

Describe alternatives you've considered
I have already considered the alternative of denying the user at the proxy level (which I am currently doing), but in my opinion, it would be cleaner not granting any access by default.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions