Backend user with specific authorities

UAA
,
1

Peace out,

i’m trying to use a backend user (A12 Doc) for loading documents and models. I don’t want to use super-user privileges because of risk minimization and it feels wrong to give a user more permissions than needed. But unfortunately the BackendAuthenticationService and the used BackendUserLoader will not insert any authorities, it creates a new user without any authorities

UAAUserDetails principal = new UAADelegatedUserDetail(new User(username, "***", Collections.emptyList()));

We created a local user and want to use it with all it’s authorities

username: ozg_user
password: XXX
firstname: OZG
lastname: user
email: XXX
authorities:
  - ozg_user_access

Is it possible w/o adjusting the BackendUserLoader do we have to use the super-user privileges ?

best regards,
Tjorben

2

hi @tjorben-atomic-moss

Backend authentication feature provides you configuration based if you want to have super user in your application.

If you want to have custom user with specific privileges you need to implement the user loader on your own. We provided an example for that in our documentation GetA12 Login