Can't delete other owners

[marius-arch]

Environment

Docker

Version

0.15.7

Describe the problem

I have 3 users with the owner and admin role but i can't delete them. The user i am logged in with also has both owner and admin role. When trying to delete one of the other two users i get 403 Forbidden and this message:

Also i can't demote the user:

Logs

ERROR tRPC OpenAPI error on user.details: TRPCError: UNAUTHORIZED

Context

No response

Please tick the boxes

• I confirm that I attached the proper logs
• I've read the docs
• I've checked for duplicate issues
• I've tried to debug myself

[github-actions]

Hi 👋. Thank you for submitting your first issue to Homarr. Please ensure that you've provided all nessesary information. You can use the three dots > Edit button to update your post with additional images and information. Depending on the current volume of requests, the team should get in conact with you shortly.

[ajnart]

Curious how you managed to have multiple owners, there should only be one

[marius-arch]

@ajnart I can tell you how this happened.
I am using homarr quite some time now, and like 2 weeks ago i started integrating authelia and oicd in the applications that support it. When i integrated oicd into homarr i wasn't able to login anymore and when i tried remove oicd again, and login with my normal credentials my user was not owner anymore.

Then i found out that my first user had the same email specified as my user that was created by oicd. So i needed an extra user to be able to login and change the email of the first user. After doing so i was able to login in with my main authelia user and had owner rights. But now all three users have owner rights

[ajnart]

Oh wow that's very interesting, thanks for the clarification. I think @manuel-rw or @SeDemal would be more capable to help you than me. (I don't understand oidc stuff)

[SeDemal]

You cannot delete other owners, that's the point of the role, only admin should be given to anyone else.
You can only remove said user of you manually edit the db.sqlite file.

[marius-arch]

@ajnart, @SeDemal ok thank you for the help.

[marius-arch]

@SeDemal but is it normal that it happens that i don't have the owner role anymore if both users (db user and authelia user) have the same email?

[SeDemal]

Making multiple users on the same email will cause issues by itself and it is not recommended to have multiple Auth providers

[ajnart]

@SeDemal would it be possible to use the drizzle db editor from within the container ?
That might be a possibility

[SeDemal]

I need to look if it's possible from the CLI actually, can't right now though.

[marius-arch]

I fixed it by downloading the db.sqlite file and using DBeaver to delete/demote the users.

[Meierschlumpf]

Multiple users with the same email and different providers will be possible in v1.0, see #1993