[GH-ISSUE #1474] Allow entry for all authenticated users in auth-access #1041

New issue

Open

opened 2026-05-07 00:29:48 +02:00 by BreizhHardware · 1 comment

BreizhHardware commented

2026-05-07 00:29:48 +02:00

Owner

Originally created by @Alloc86 on GitHub (Oct 26, 2025).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1474

💡 Idea
I am running a private Ntfy instance with default access being deny-all. As users can only be created manually by myself and I want each of them to be able to subscribe to everything I was looking for an option to specify an auth-access entry like "authenticated:*:read-only". But it seems it currently only supports either specifying an individual user name or any unauthenticated user (*/everyone).

PS: I tried adding a "*:*:read-only" entry, but that seems to basically override "auth-default-access" then, meaning it also makes it read-only for non-authenticated users.

So it would be really helpful (to myself at least ;) ) if there was a special username just like "everyone" that would be used to specify rules for any user that is logged in (and not admin) and not matched by a more specific rule.

💻 Target components
ntfy server, config parsing and ACL rule matching

Originally created by @Alloc86 on GitHub (Oct 26, 2025). Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1474 :bulb: **Idea** I am running a private Ntfy instance with default access being deny-all. As users can only be created manually by myself and I want each of them to be able to subscribe to everything I was looking for an option to specify an auth-access entry like "authenticated:\*:read-only". But it seems it currently only supports either specifying an individual user name or any unauthenticated user (\*/everyone). **PS:** I tried adding a "\*:\*:read-only" entry, but that seems to basically override "auth-default-access" then, meaning it also makes it read-only for non-authenticated users. So it would be really helpful (to myself at least ;) ) if there was a special username just like "everyone" that would be used to specify rules for any user that is logged in (and not admin) and not matched by a more specific rule. :computer: **Target components** ntfy server, config parsing and ACL rule matching

BreizhHardware added the

enhancement

server

labels

2026-05-07 00:29:48 +02:00

BreizhHardware commented

2026-05-07 00:29:48 +02:00

Author

Owner

@binwiederhier commented on GitHub (Jan 18, 2026):

Not a bad idea. Not trivial and a dangerous area to tinker with. I'd be happy to accept PRs.

@binwiederhier commented on GitHub (Jan 18, 2026): Not a bad idea. Not trivial and a dangerous area to tinker with. I'd be happy to accept PRs.

BreizhHardware referenced this issue

2026-05-07 01:00:46 +02:00

[GH-ISSUE #1724] Insistent notification type (Android call-style alert, no Twilio) #1200