-
Notifications
You must be signed in to change notification settings - Fork 1.9k
Open
Labels
feature-requestNew feature request for Prowler.New feature request for Prowler.not-plannedIssues that are not in the Prowler roadmap.Issues that are not in the Prowler roadmap.
Description
New feature motivation
Currently, the login screen allows new tenants to be created using the “Need to create an account? Sign up” option. This can be a security or administrative control risk in production environments, as any user could create an unauthorized tenant.
Solution Proposed
Add a control mechanism for creating new tenants, for example:
- Environment variable that allows the Sign up option to be disabled, so that tenant creation is only available if explicitly enabled.
- ALLOW_TENANT_CREATION=true/false
- Centralized administration where only an administrator user can manage the creation of new tenants from the control panel.
Describe alternatives you've considered
Keep the current option open for all users (insecure in production).
Implement frontend control by manually removing the Sign up button (not scalable).
Additional context
This change is especially useful in organizations that require strict control over who can create tenants, preventing improper configurations or duplication of environments.
Metadata
Metadata
Assignees
Labels
feature-requestNew feature request for Prowler.New feature request for Prowler.not-plannedIssues that are not in the Prowler roadmap.Issues that are not in the Prowler roadmap.