fix: restrict default permissions for proxy-auth auto-provisioned users (#5890)

Co-authored-by: Henrique Dias <mail@hacdias.com>
This commit is contained in:
kodareef5 2026-04-04 16:02:34 -04:00 committed by GitHub
parent 1e03feadb5
commit f13c7c8cff
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 82 additions and 0 deletions

View file

@ -46,6 +46,9 @@ func (a ProxyAuth) createUser(usr users.Store, setting *settings.Settings, srv *
LockPassword: true,
}
setting.Defaults.Apply(user)
user.Perm.Admin = false
user.Perm.Execute = false
user.Commands = []string{}
var userHome string
userHome, err = setting.MakeUserDir(user.Username, user.Scope, srv.Root)