Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Campaigns "Security" #2325

Open
2 of 3 tasks
PeteKersker opened this issue Feb 24, 2025 · 2 comments
Open
2 of 3 tasks

Campaigns "Security" #2325

PeteKersker opened this issue Feb 24, 2025 · 2 comments
Labels
enhancement New feature or request

Comments

@PeteKersker
Copy link

First of all, Listmonk is an excellent product. Thank you for all you have done here!

I'm working to implement the newest version (4.1.0) in my multi-user environment. I'm utilizing OIDC SSO with Nextcloud as the OIDC provider. It works perfectly! I'm also trying to set up security for each user (bloggers, etc.) so they do not stomp on each other. I'm able to accomplish this quite well with:

  • Subscribers - using User Roles: subscribers_get (and turning off subscribers_get_all)
  • Lists - using List Roles: View & Manage the list(s) I set up for them.
  • Campaigns - I have not found a way to filter the list of campaigns.

Is your feature request related to a problem? Please describe.
Is there a way to filter the list of campaigns a User can see based on other security set in place? I'm trying to keep the users from accidentally deleting another User's campaign. I know the User/Security/OIDC parts are new and the documentation is still catching up. So, I figured I'd start with the question.

Describe the solution you'd like
If this is not currently possible (limiting campaigns on the list), perhaps a "campaigns_get_all" security level could be added to the User Roles. This role could show all campaigns the way it works currently for "campaigns_get". This would free up "campaigns_get" for a more limited, user-specific list. Perhaps the list could be limited by campaigns connected to lists the person has security to view and/or manage? Just thinking out loud here.

Thanks again for your great work. I'll look forward to your thoughts.

@PeteKersker PeteKersker added the enhancement New feature or request label Feb 24, 2025
@knadh
Copy link
Owner

knadh commented Feb 26, 2025

Hi @PeteKersker. This isn't supported currently and the solution you had proposed is what I had in mind originally. However, I recollect running into some gotchas while trying to implement it. We can consider this for a future version.

@PeteKersker
Copy link
Author

PeteKersker commented Feb 26, 2025 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants