Self Hosted, prevent new users from creating apps

jmbyrd · October 22, 2019, 8:35pm

Just setup Squidex in Azure using OIDC login with Azure Active Directory (single tenant). One thing I noticed, is that when a new user logs in with their Azure AD account, with no permissions set, they can stand up new apps. Is there any way to disable this and prevent new users from being able to create apps?

Sebastian · October 23, 2019, 6:01am

Look here: https://github.com/Squidex/squidex/blob/master/src/Squidex/appsettings.json#L67

T_K · May 4, 2020, 7:50am

We also want to prevent users from creating new apps. So far we created users on an app and assigned custom roles to them for that app which is working. The problem now is when that person logs in they can do the following:

Create another app, new blog sample, new profile sample and new identify app

EDITED:

We want to prevent these options being visible to users that don’t have the rights to action these:

Sebastian · May 4, 2020, 8:24am

Whats wrong with the setting above?

T_K · May 4, 2020, 12:07pm

Goes to 404 page, but I can see where you are referring to and found the options in appsettings.json to set the permissions to create app to true/false and it is working 100%.

Now just to only make API Documentation, Feedback & Support and Github only visible to admin as well.,

Sebastian · May 4, 2020, 7:52pm

github.com

Squidex/squidex/blob/master/backend/src/Squidex/appsettings.json#L77


  "Phone": "^\\(*\\+*[1-9]{0,3}\\)*-*[1-9]{0,3}[-. /]*\\(*[2-9]\\d{2}\\)*[-. /]*\\d{3}[-. /]*\\d{4} *e*x*t*\\.* *\\d{0,4}$",
  // Regex for slugs (e.g. hello-world).
  "Slug": "^[a-z0-9]+(\\-[a-z0-9]+)*$",
  // Regex for urls.
  "Url": "^(?:http(s)?:\\/\\/)?[\\w.-]+(?:\\.[\\w\\.-]+)+[\\w\\-\\._~:\\/?#%[\\]@!\\$&'\\(\\)\\*\\+,;=.]+$"
},


/*
 * True if only admins should be able to create apps.
 */
"onlyAdminsCanCreateApps": false,


"map": {
  /*
   * Define the type of the geolocation service.
   *
   * Supported: GoogleMaps, OSM
   */
  "type": "OSM",
  "googleMaps": {
    /*

ARS · July 16, 2021, 11:17am

Thank you, I was looking exactly for this!
To save some time for newbies - like me -, the identical ENV variable to onlyAdminsCanCreateApps is:

UI__ONLYADMINSCANCREATEAPPS=true

Use this e.g. in docker-compose.yml