[GitHub] [superset] manodupont edited a comment on issue #17825: Can't add a database when using OIDC (Keycloak)

[GitBox <gi...@apache.org>]

manodupont edited a comment on issue #17825:
URL: https://github.com/apache/superset/issues/17825#issuecomment-998851391


   Well yes i do understand. I  think this is the probleme cause even though I force the user logged to be "Admin" it still shows as "Gamma" when I am logged in, in the user profile.
   
   So, i mean, any information on how role works and how I can map roles into my SecurityManager would be appreciated.
   
   Right now my superset_config.py looks like this : 
   ```
   ...
   from keycloack_security_manager  import  OIDCSecurityManager
   from flask_appbuilder.security.manager import AUTH_OID, AUTH_REMOTE_USER, AUTH_DB, AUTH_LDAP, AUTH_OAUTH
   import os
   
   #---------------------------KEYCLOACK ----------------------------
   
   curr  =  os.path.abspath(os.getcwd())
   AUTH_TYPE = AUTH_OID
   SECRET_KEY: 'SomethingNotEntirelySecret'
   OIDC_CLIENT_SECRETS =  curr + '/docker/pythonpath_dev/client_secrets.json'
   OIDC_ID_TOKEN_COOKIE_SECURE = False
   OIDC_REQUIRE_VERIFIED_EMAIL = False
   OIDC_OPENID_REALM: 'portal-cockpit'
   OIDC_INTROSPECTION_AUTH_METHOD: 'client_secret_post'
   CUSTOM_SECURITY_MANAGER = OIDCSecurityManager
   AUTH_USER_REGISTRATION = True
   AUTH_USER_REGISTRATION_ROLE = 'Admin'
   
   #--------------------------------------------------------------
   ...
   ```
   
   So i thought that `AUTH_USER_REGISTRATION_ROLE = 'Admin'` would set anything to "Admin" but it doesn't seem to work.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org