Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Dojo V3 - Tailwind UI rebuild, legacy authorization, OS surface removals#14865

Merged
Maffooch merged 1 commit into
DefectDojo:devfrom
devGregA:tailwind
May 14, 2026
Merged

Dojo V3 - Tailwind UI rebuild, legacy authorization, OS surface removals#14865
Maffooch merged 1 commit into
DefectDojo:devfrom
devGregA:tailwind

Conversation

@devGregA
Copy link
Copy Markdown
Contributor

@devGregA devGregA commented May 13, 2026

  • Replace Bootstrap 3 + SB Admin 2 with Tailwind CSS v4
  • Switch OS authorization back to the legacy authorized_users model
  • Remove SSO, groups, and member management from OS

Hand the authorization layer off to dojo-pro. OS keeps a legacy
``is_superuser`` / ``is_staff`` / ``authorized_users`` model and the
seven RBAC + Dojo_Group classes survive as ``managed=False`` shells in
``dojo/authorization/models.py`` so historical pro migrations
(``pro.0001_plugiun_consolidation`` ``EnhancedDojoGroup.group``,
``pro.0034_pghistory_for_permissions_models`` proxy bases) keep
resolving when Django reloads project state. OS code makes no
runtime references to Pro.

Single ``dojo.0268_release_authorization_to_pro`` migration folds:
- Re-introduces ``authorized_users`` M2M on Product / Product_Type and
  backfills it from the RBAC tables (Member / Group → flat membership;
  Global_Role(Owner|Writer|Maintainer|API_Importer) → ``is_superuser`` /
  ``is_staff``).
- Drops the redundant post-RBAC ``members`` / ``authorization_groups``
  M2M accessors on Product / Product_Type (the through-tables remain).
- Flips the eight authorization shells to ``managed=False`` and pins
  their ``db_table``s.
- ``RemoveField``s ``default_group`` / ``default_group_role`` /
  ``default_group_email_pattern`` from ``dojo_system_settings`` (Pro
  copies the values onto ``EnhancedSystemSettings`` first via
  ``run_before``).

Plus the Tailwind UI rebuild and the OS surface tidying that this
branch was already carrying.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
@github-actions github-actions Bot added docker New Migration Adding a new migration file. Take care when merging. settings_changes Needs changes to settings.py based on changes in settings.dist.py included in this PR apiv2 docs unittests integration_tests ui labels May 13, 2026
@Maffooch Maffooch added this to the 2.59.0 milestone May 13, 2026
Copy link
Copy Markdown
Contributor

@mtesauro mtesauro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@Maffooch Maffooch merged commit 952a56d into DefectDojo:dev May 14, 2026
148 checks passed
@Maffooch Maffooch deleted the tailwind branch May 14, 2026 23:04
@fopina
Copy link
Copy Markdown
Contributor

fopina commented Jun 2, 2026

Are these the long awaited changes for a new UI?
Intern working on it went wrong and replaced by Opus? 😄

@LesSyner
Copy link
Copy Markdown

LesSyner commented Jun 2, 2026

IMO it's wrong move to remove SSO, definitely less security :(

@fopinappb
Copy link
Copy Markdown
Contributor

fopinappb commented Jun 2, 2026

RIP Dojo 😢

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

apiv2 docker docs integration_tests New Migration Adding a new migration file. Take care when merging. settings_changes Needs changes to settings.py based on changes in settings.dist.py included in this PR ui unittests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants