Setting guest permissions

[fyr77]

The documentation makes it seem as if I should be able to set guest permissions (such as BYPASS_APPROVAL) using env variables. After having a quick look through the source code, it seems to me that this is not possible at the moment...? Also, it's not actually documented, but this statement is on the security page: "All guest permissions must be set through environment variables."

If I am mistaken, do please inform me of how to configure this.

[fyr77]

The updated docs make it clearer, so I want to rephrase my question:

Would it be possible to add the ability to configure guest users too? As in, allowing guests to skip submission approval.
This would be useful for e.g. local deployments that are not exposed to the internet or sites behind a VPN.

[jamesread]

Heya @fyr77 , did you see this in settings, is this what you wanted?

[fyr77]

Heyo @jamesread, I did see that yes, but I would like the quotes guests add to be immediately published without having to be approved.

[jamesread]

Ah I see. Isn't that a little dangerous? Assuming you're hosting your instance on the public internet, you'd be spammed very quickly.

[fyr77]

Yes, on the public internet it would be quite dangerous. I am thinking more of hosting it behind a VPN or some kind of OAuth Proxy, or even local deployments.

If that option were to be added, it likely would be good to mark it as dangerous or not recommended...

[jamesread]

Heya @fyr77 , added in the revamped settings page in 2.2.0. Please could you let me know what you think.

[fyr77]

Can confirm it works, thanks!