From 4b5fe08891f449cb159d302330b532901b386da1 Mon Sep 17 00:00:00 2001 From: Jakob Ackermann Date: Tue, 5 Aug 2025 11:39:50 +0200 Subject: [PATCH] [web] add audit log for changing admin access in Server Pro via SSO (#27631) * [web] add missing await statement in admin-panel tests * [web] add audit log for changing admin access in Server Pro via SSO GitOrigin-RevId: 69e994d0b2e0f0e0281ade80acbdf7fb30bd2e89 --- services/web/docker-compose.common.env | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/services/web/docker-compose.common.env b/services/web/docker-compose.common.env index 8facd00c2c..4812838902 100644 --- a/services/web/docker-compose.common.env +++ b/services/web/docker-compose.common.env @@ -28,6 +28,8 @@ OVERLEAF_LDAP_EMAIL_ATT=mail OVERLEAF_LDAP_NAME_ATT=cn OVERLEAF_LDAP_LAST_NAME_ATT=sn OVERLEAF_LDAP_UPDATE_USER_DETAILS_ON_LOGIN=true +OVERLEAF_LDAP_IS_ADMIN_ATT=ou +OVERLEAF_LDAP_IS_ADMIN_ATT_VALUE=Staff # Server-Pro SAML OVERLEAF_SAML_ENTRYPOINT=http://saml/simplesaml/saml2/idp/SSOService.php OVERLEAF_SAML_CALLBACK_URL=http://saml/saml/callback @@ -37,6 +39,8 @@ OVERLEAF_SAML_EMAIL_FIELD=email OVERLEAF_SAML_FIRST_NAME_FIELD=givenName OVERLEAF_SAML_LAST_NAME_FIELD=sn OVERLEAF_SAML_UPDATE_USER_DETAILS_ON_LOGIN=true +OVERLEAF_SAML_IS_ADMIN_FIELD=sn +OVERLEAF_SAML_IS_ADMIN_FIELD_VALUE=Brookes # simplesaml cert from https://github.com/overleaf/google-ops/tree/master/docker-images/saml-test/var-simplesamlphp/cert OVERLEAF_SAML_CERT=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 # DEVICE_HISTORY_SECRET has been generated using: