Bug: Member given option to create their own org #701

Closed
opened 2025-11-13 12:08:10 -06:00 by GiteaMirror · 2 comments
Owner

Originally created by @keonramses on GitHub (Sep 27, 2025).

Users logging in via the OIDC are given the ability/option to create their organization.

I created a test user with the member role in my existing org and did not give them access to a resource. When they tried logging in, they get the Access Denied page and were given the option to go back home. But going back home gives them the option to create a new org, which should not be the case.

Originally created by @keonramses on GitHub (Sep 27, 2025). Users logging in via the OIDC are given the ability/option to create their organization. I created a test user with the member role in my existing org and did not give them access to a resource. When they tried logging in, they get the Access Denied page and were given the option to go back home. But going back home gives them the option to create a new org, which should not be the case.
Author
Owner

@miloschwartz commented on GitHub (Sep 28, 2025):

This is something that can be disabled: https://docs.digpangolin.com/self-host/advanced/config-file#param-disable-user-create-org

@miloschwartz commented on GitHub (Sep 28, 2025): This is something that can be disabled: https://docs.digpangolin.com/self-host/advanced/config-file#param-disable-user-create-org
Author
Owner

@keonramses commented on GitHub (Sep 28, 2025):

Thank you. I don't know how i managed to miss this.

@keonramses commented on GitHub (Sep 28, 2025): Thank you. I don't know how i managed to miss this.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#701