github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-05-22 14:21:55 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity

[GH-ISSUE #2743] Dynamic Roles and Permissions #26651

New Issue
Closed
opened 2026-04-17 17:17:52 -05:00 by GiteaMirror · 10 comments
GiteaMirror commented 2026-04-17 17:17:52 -05:00
Owner
Copy Link

Originally created by @gerkim62 on GitHub (May 22, 2025).
Original GitHub issue: https://github.com/better-auth/better-auth/issues/2743

Is this suited for github?

  • Yes, this is suited for github

Is your feature request related to a problem? Please describe.

Currently, better-auth only supports hardcoded roles in the codebase, which makes it impossible to manage access control dynamically without deploying code changes or when the permissions and roles are not already known beforehand.

Describe the solution you'd like

I’d like better-auth to support dynamic roles and permissions that can be created and managed at runtime—ideally via an API or admin UI. These roles be stored in database.

Describe alternatives you've considered

Building a separate, custom access control layer on top of better-auth, but this duplicates effort and adds complexity.

Additional context

See this related discussion: https://www.answeroverflow.com/m/1357026607033880727

Originally created by @gerkim62 on GitHub (May 22, 2025). Original GitHub issue: https://github.com/better-auth/better-auth/issues/2743 ### Is this suited for github? - [x] Yes, this is suited for github ### Is your feature request related to a problem? Please describe. Currently, better-auth only supports hardcoded roles in the codebase, which makes it impossible to manage access control dynamically without deploying code changes or when the permissions and roles are not already known beforehand. ### Describe the solution you'd like I’d like better-auth to support dynamic roles and permissions that can be created and managed at runtime—ideally via an API or admin UI. These roles be stored in database. ### Describe alternatives you've considered Building a separate, custom access control layer on top of better-auth, but this duplicates effort and adds complexity. ### Additional context See this related discussion: [https://www.answeroverflow.com/m/1357026607033880727](https://www.answeroverflow.com/m/1357026607033880727)
GiteaMirror added the lockedenhancement labels 2026-04-17 17:17:52 -05:00
GiteaMirror commented 2026-04-17 17:17:55 -05:00
Author
Owner
Copy Link

@yavuz1205 commented on GitHub (May 23, 2025):

I'm experiencing the exact same issue and would really appreciate this feature being implemented.

<!-- gh-comment-id:2905486468 --> @yavuz1205 commented on GitHub (May 23, 2025): I'm experiencing the exact same issue and would really appreciate this feature being implemented.
GiteaMirror commented 2026-04-17 17:17:56 -05:00
Author
Owner
Copy Link

@brettfullstack commented on GitHub (May 23, 2025):

I have the same problem and because of this problem I am thinking of changing the package no matter how good it is. I tried to update it with my own additions but I would be very happy if the package updates itself in this area.

<!-- gh-comment-id:2905489204 --> @brettfullstack commented on GitHub (May 23, 2025): I have the same problem and because of this problem I am thinking of changing the package no matter how good it is. I tried to update it with my own additions but I would be very happy if the package updates itself in this area.
GiteaMirror commented 2026-04-17 17:17:57 -05:00
Author
Owner
Copy Link

@Bruhun commented on GitHub (May 25, 2025):

Same issue, can't really go forward with it...

<!-- gh-comment-id:2907924357 --> @Bruhun commented on GitHub (May 25, 2025): Same issue, can't really go forward with it...
GiteaMirror commented 2026-04-17 17:17:58 -05:00
Author
Owner
Copy Link

@ohabash commented on GitHub (Jun 5, 2025):

We need this too.

When my app starts cant we just remove hard coded things and get the data from our own database instead? then when there is a change in those databases we would just restart the access controls?

Please let me know if you think this would work.

<!-- gh-comment-id:2946315146 --> @ohabash commented on GitHub (Jun 5, 2025): We need this too. When my app starts cant we just remove hard coded things and get the data from our own database instead? then when there is a change in those databases we would just restart the access controls? Please let me know if you think this would work.
GiteaMirror commented 2026-04-17 17:17:59 -05:00
Author
Owner
Copy Link

@sovetski commented on GitHub (Jun 24, 2025):

It seems like a good idea, but with dynamic roles, wouldn’t we lose the benefits of TypeScript?

<!-- gh-comment-id:3001283934 --> @sovetski commented on GitHub (Jun 24, 2025): It seems like a good idea, but with dynamic roles, wouldn’t we lose the benefits of TypeScript?
GiteaMirror commented 2026-04-17 17:18:02 -05:00
Author
Owner
Copy Link

@ohabash commented on GitHub (Jun 24, 2025):

there is no type safety in any RBAC system where there is dynamic control. Unless the values are predefined. Or unless they are generated or handled manually. Kind of like prisma generate

<!-- gh-comment-id:3001940662 --> @ohabash commented on GitHub (Jun 24, 2025): there is no type safety in any RBAC system where there is dynamic control. Unless the values are predefined. Or unless they are generated or handled manually. Kind of like prisma generate
GiteaMirror commented 2026-04-17 17:18:05 -05:00
Author
Owner
Copy Link

@gerkim62 commented on GitHub (Jun 26, 2025):

This is a reasonable compromise

<!-- gh-comment-id:3007602353 --> @gerkim62 commented on GitHub (Jun 26, 2025): This is a reasonable compromise
GiteaMirror commented 2026-04-17 17:18:06 -05:00
Author
Owner
Copy Link

@thereis commented on GitHub (Aug 13, 2025):

Looking forward for this feature!

<!-- gh-comment-id:3182680201 --> @thereis commented on GitHub (Aug 13, 2025): Looking forward for this feature!
GiteaMirror commented 2026-04-17 17:18:06 -05:00
Author
Owner
Copy Link

@its4lion commented on GitHub (Aug 27, 2025):

Would be awesome to add this to the admin plugin too!

<!-- gh-comment-id:3229578857 --> @its4lion commented on GitHub (Aug 27, 2025): Would be awesome to add this to the admin plugin too!
GiteaMirror commented 2026-04-17 17:18:07 -05:00
Author
Owner
Copy Link

@yavuz1205 commented on GitHub (Sep 9, 2025):

@gerkim62 @Bekacru Since this feature was added in version 1.3.8, we can close this issue.

<!-- gh-comment-id:3271970138 --> @yavuz1205 commented on GitHub (Sep 9, 2025): @gerkim62 @Bekacru Since this feature was added in version 1.3.8, we can close this issue.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
adapter
astro
awaiting external contributor
blocked
breaking
breaking change
bug
c-devops
core
credentials
database
dependencies
devops
devtools
docs
documentation
duplicate
elysia
enhancement
enterprise
expo
express
fastify
good first issue
help wanted
hono
identity
infra
integration
invalid
javascript
locked
maintenance
need-more-information
needs: info
needs: repro
nextjs
nuxt
oauth
organization
P0
payments
perf
platform
plugin
pull-request
Mirrored from GitHub Pull Request
 question
ready
regression
remix
security
social-provider
solid
stale
svelte
tanstack-start
tracking
version-bump
vue
wontfix
No Label enhancement locked
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#26651
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?