Skip to content

Commit 83be956

Browse files
disallow login instead of automatically granting viewer permission
1 parent 82ac6c3 commit 83be956

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

apps/grafana/components/oidc/grafana.properties

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,4 @@ GF_AUTH_GENERIC_OAUTH_ALLOW_SIGN_UP=true
44
GF_AUTH_GENERIC_OAUTH_SCOPES=openid email profile offline_access roles
55
GF_AUTH_GENERIC_OAUTH_EMAIL_ATTRIBUTE_PATH=email
66
GF_AUTH_GENERIC_OAUTH_LOGIN_ATTRIBUTE_PATH=username
7-
GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH=contains(roles[*], 'admin') && 'Admin' || contains(roles[*], 'editor') && 'Editor' || 'Viewer'
7+
GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH=contains(roles[*], 'admin') && 'Admin' || contains(roles[*], 'editor') && 'Editor' || contains(roles[*], 'viewer') && 'Viewer' || 'false'

0 commit comments

Comments
 (0)