social account admin group support

src/paperless/adapter.py

@@ -85,5 +85,9 @@ class CustomSocialAccountAdapter(DefaultSocialAccountAdapter):
         Populate the user with data from the social account. Stub is kept in case
         global default permissions are implemented in the future.
         """
-        # TODO: If default global permissions are implemented, should also be here
-        return super().populate_user(request, sociallogin, data)  # pragma: no cover
+        user = super().populate_user(request, sociallogin, data)
+        groups = sociallogin.account.extra_data.get(settings.SOCIALACCOUNT_ADMIN_GROUP_SCOPE)
+        if groups:
+            if settings.SOCIALACCOUNT_ADMIN_GROUP in groups:
+                user.is_superuser = True
+        return user  # pragma: no cover

src/paperless/settings.py

@@ -459,6 +459,8 @@ SOCIALACCOUNT_AUTO_SIGNUP = __get_boolean("PAPERLESS_SOCIAL_AUTO_SIGNUP")
 SOCIALACCOUNT_PROVIDERS = json.loads(
     os.getenv("PAPERLESS_SOCIALACCOUNT_PROVIDERS", "{}"),
 )
+SOCIALACCOUNT_ADMIN_GROUP = os.getenv("PAPERLESS_SOCIALACCOUNT_ADMIN_GROUP", "admin")
+SOCIALACCOUNT_ADMIN_GROUP_SCOPE = os.getenv("SOCIALACCOUNT_ADMIN_GROUP_SCOPE", "groups")
 
 ACCOUNT_EMAIL_SUBJECT_PREFIX = "[Paperless-ngx] "