dd new user to base role

uffd/default_config.cfg

@@ -21,6 +21,8 @@ MAIL_PASSWORD='*****'
 MAIL_USE_STARTTLS=True
 MAIL_FROM_ADDRESS='foo@bar.com'
 
+ROLES_BASEROLES=['base']
+
 SQLALCHEMY_TRACK_MODIFICATIONS=False
 
 # do NOT set in production

uffd/user/templates/user.html

@@ -82,7 +82,9 @@
 						<tr id="role-{{ role.id }}">
 							<td>
 								<div class="form-check">
-									<input class="form-check-input" type="checkbox" id="role-{{ role.id }}-checkbox" name="role-{{ role.id }}" value="1" aria-label="enabled" {% if user.dn in role.member_dns() %}checked{% endif %}>
+									<input class="form-check-input" type="checkbox" id="role-{{ role.id }}-checkbox" name="role-{{ role.id }}" value="1" aria-label="enabled"
+										{% if user.dn in role.member_dns() or role.name in config["ROLES_BASEROLES"] %}checked {% endif %}
+										{% if role.name in config["ROLES_BASEROLES"] %}disabled {% endif %}>
 								</div>
 							</td>
 							<td>

uffd/user/views_user.py

@@ -75,7 +75,7 @@ def update(uid=False):
 	roles = Role.query.all()
 	for role in roles:
 		role_member_dns = role.member_dns()
-		if request.values.get('role-{}'.format(role.id), False):
+		if request.values.get('role-{}'.format(role.id), False) or role.name in current_app.config["ROLES_BASEROLES"]:
 			if user.dn in role_member_dns:
 				continue
 			role.add_member(user)