feat(auth,roundcube): sp.roundcube.admins inherits sp.roundcube.users

This commit is contained in:
Alexander Tomokhov 2024-12-27 08:07:45 +04:00
parent c127145425
commit dd4a356ae7

View file

@ -73,7 +73,7 @@ in
services.kanidm.provision = lib.mkIf is-auth-enabled {
groups = {
"sp.roundcube.admins".members = [ "sp.admins" ];
"sp.roundcube.users".present = true;
"sp.roundcube.users".members = [ "sp.roundcube.admins" ];
};
systems.oauth2.roundcube = {
displayName = "Roundcube";
@ -91,14 +91,6 @@ in
];
};
removeOrphanedClaimMaps = true;
# add more scopes when a user is a member of specific group
supplementaryScopeMaps."sp.roundcube.admins" = [ "admin" ];
claimMaps.groups = {
joinType = "array";
valuesByGroup = {
"sp.roundcube.admins" = [ "admin" "test" ];
};
};
};
};
};