Skip to content

Conversation

@smithjw1
Copy link
Contributor

Description

This is work to fix #114. It was done with a big assist from AI, so I'm adding it as a draft for review.

The goal is to apply a filter that, if no user roles are returned, can inspect the user object and assign a set of roles. The returned values are validated as actual roles, and the filter runs only when a user has no roles.

This filter would allow someone to circumvent intended governance choices, for example, if a customer wanted a user with no roles to get the default user. I suggest this is an acceptable risk, but others may disagree.

Steps to Test

Outline the steps to test and verify the PR here.

Example:

  1. Check out PR.
  2. Run npm run build.
  3. Install on a multisite
  4. Assign no roles to a super admin
  5. Write a filter to assign a specific role
  6. Confirm that role is assigned

@smithjw1 smithjw1 self-assigned this Nov 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Multisite: Super Admins get "Default" Treatment

2 participants