SelfPrivacy/selfprivacy-nixos-config
1
0
Fork 0
mirror of https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config.git synced 2025-03-12 17:03:49 +00:00
Code Issues Projects Releases Wiki Activity

fix auth: sp.{service}.admins groups provisioning

Browse source
This commit is contained in:
Alexander Tomokhov 2024-12-29 02:20:54 +04:00
parent bc8f998176
commit 7f9f7a4db2
1 changed files with 5 additions and 1 deletions

6
sp-modules/auth/kanidm.nix
View file

@ -126,10 +126,14 @@ let
filterPresent = filterAttrs (_: v: v.present);
selfprivacy-admin-groups-regex = "^sp\.([[:alnum:]]+\.|)admins$";
is-selfprivacy-admin-group = name:
! builtins.isNull (builtins.match selfprivacy-admin-groups-regex name);
isGroupNonOverwritable = g: false
|| ! g ? members
|| g ? members && g.members == [ ]
|| g ? members && g.members == [ "sp.admins" ];
|| g ? members && builtins.any is-selfprivacy-admin-group g.members;
provisionStateJson = pkgs.writeText "provision-state.json" (
builtins.toJSON {