From c2f80732b7f35ff6b2d33915334b542c642c97bd Mon Sep 17 00:00:00 2001
From: Ernesto Rico Schmidt <ernesto@helsinki.at>
Date: Thu, 14 Dec 2023 15:37:42 -0400
Subject: [PATCH] feat: get PRIVILEGED_GROUP and ENTITLED_GROUPS from the
 environment

---
 steering/settings.py | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/steering/settings.py b/steering/settings.py
index 15b197bf..b4288249 100644
--- a/steering/settings.py
+++ b/steering/settings.py
@@ -161,10 +161,14 @@ LOGIN_URL = "/admin/login/"  # Login page OIDC redirects to
 OIDC_EXTRA_SCOPE_CLAIMS = "steering.oidc_provider_settings.AuraScopeClaims"
 
 # OIDC Provider extra scope claims
-# - Superusers and members of these group are privileged
-PRIVILEGED_GROUP = "Program"
-# - Members of these groups are entitled
-ENTITLED_GROUPS = ["Broadcast", "BroadcastPlus"]  # this needs to be a list
+# - Superusers and members of this group are privileged.
+PRIVILEGED_GROUP = os.getenv("PRIVILEGED_GROUP") if os.getenv("") != "" else "Program"
+# - Members of these groups are entitled.
+ENTITLED_GROUPS = (
+    os.getenv("ENTITLED_GROUPS").split(",")
+    if os.getenv("ENTITLED_GROUPS") != ""
+    else ["Broadcast,BroadcastPlus"]
+)
 
 # The API will filter the active shows using one of these filters
 # One of these should to be True.
-- 
GitLab