Restricting a source to a single user

[huyz]

I don't think I understand the permission model. How do I restrict a source to a particular (OIDC) user?

[huyz]

Never mind, found the User Management (and Access Management) pages

[gtsteffaniak]

I could update the wiki to explain that scenario better.

[gtsteffaniak]

hope this helps: https://github.com/gtsteffaniak/filebrowser/wiki/Access-Rules#rule-precedence-and-overriding

[huyz]

@gtsteffaniak Thanks for writing this up.

I'm still a bit confused about some parts:

rules actually override a deny rule because of this and the access management defaults to "allow" if no rules are found.

This isn't what I'm seeing. As soon as I have a DenyAll rule on a source /, I can't find any way to let a user access that source, whether I do it on the same Access Management page:

or on the User Management page:

It seems to me that DenyAll always wins as I get a You don't have permissions to access this.

[gtsteffaniak]

can you try again with 0.8.2? also I added a config level property that acts as a denyAll rule at the root level you could take advantage of.

It should work as expected in 0.8.2, I have tests that confirm it.

[huyz]

@gtsteffaniak Works now thanks