[GUACAMOLE-1487] Allow settings to apply to all users

• Type: New Feature
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: guacamole-client
• Assignee: Unassigned
• Reporter: Nick Couchman
• Created: 03/Jan/22 17:23
• Updated: 12/Jun/24 13:07

Description

There are several existing Jira issues that seem to rely on being able to store information or apply settings to all users of the Guacamole system. Presumably this could be accomplish one (or both) of a couple of different ways:

• Add a guacamole_system_attributes table that can store arbitrary data that can be used for the entire system. There is some precedent for this with the guacamole_system_permission table, so I don't think it's a huge departure from that. Presumably we'd also want to implement some graphical way to manage that data.
• Add a global, built-in group - something like All_Users - that automatically contains all users of the system, and to which permissions and attributes could be applied through the use of the existing guacamole_user_group_* tables. This would require that this group have an entry in the tables, but membership in the group could either be enforced - that is, there would be no way to actually remove a user from the group - or at least defaulted - where a user would be added until explicitly removed. There are some other potential built-in groups - like Sys Admins - that wouldn't be enforced or required, but might help to allocate system-level permissions a bit better.

Curious what the thoughts/opinions are on either or both of these options.

Issue Links

• is duplicated by: GUACAMOLE-1960 Ability to set default connection groups when using 3rd party auth provider