outposts: add repair_permissions command

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

authentik/outposts/management/commands/repair_permissions.py

@@ -0,0 +1,15 @@
+"""Repair missing permissions"""
+from django.core.management.base import BaseCommand, no_translations
+from django.apps import apps
+from django.contrib.auth.management import create_permissions
+
+
+class Command(BaseCommand):  # pragma: no cover
+    """Repair missing permissions"""
+
+    @no_translations
+    def handle(self, *args, **options):
+        """Check permissions for all apps"""
+        for app in apps.get_app_configs():
+            self.stdout.write(f"Checking app {app.name} ({app.label})\n")
+            create_permissions(app, verbosity=0)

authentik/outposts/models.py

@@ -371,7 +371,11 @@ class Outpost(ManagedModel):
                         )
                         Event.new(
                             action=EventAction.SYSTEM_EXCEPTION,
-                            message=exception_to_string(exc),
+                            message=(
+                                "While setting the permissions for the service-account, a permission "
+                                "was not found: "
+                                "Check https://goauthentik.io/docs/troubleshooting/missing_permission"
+                            ) + exception_to_string(exc),
                         ).set_user(user).save()
                 else:
                     app_label, perm = model_or_perm.split(".")