[
https://issues.apache.org/jira/browse/SYNCOPE-1856?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Francesco Chicchiriccò updated SYNCOPE-1856:
--------------------------------------------
Description:
When an administrator is granted the {{REALM_UPDATE}} entitlement for a
specific {{realm}}, they are able to navigate in Console to a higher-level
{{realm}} using the breadcrumb navigation, and can use the buttons in the panel
to:
* Create a new {{realm}} starting from the higher-level {{realm}},
* Edit the higher-level {{realm}},
* Delete the higher-level {{realm}}.
This behavior can also be reproduced through REST API calls.
was:
When a user is defined in a specific {{realm}} but navigates to a higher-level
{{realm}} using the breadcrumb navigation, they can use the buttons in the
panel to:
* Create a new {{realm}} starting from the higher-level {{realm}},
* Edit the higher-level {{realm}},
* Delete the higher-level {{realm}}.
This behavior can also be reproduced through REST API calls.
> Administrator can update and delete realms outside of the granted subtree
> -------------------------------------------------------------------------
>
> Key: SYNCOPE-1856
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1856
> Project: Syncope
> Issue Type: Bug
> Components: console, core
> Affects Versions: 3.0.10, 4.0.0-M0
> Reporter: Matteo Tatoni
> Priority: Major
> Fix For: 3.0.11, 4.0.0
>
>
> When an administrator is granted the {{REALM_UPDATE}} entitlement for a
> specific {{realm}}, they are able to navigate in Console to a higher-level
> {{realm}} using the breadcrumb navigation, and can use the buttons in the
> panel to:
> * Create a new {{realm}} starting from the higher-level {{realm}},
> * Edit the higher-level {{realm}},
> * Delete the higher-level {{realm}}.
> This behavior can also be reproduced through REST API calls.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
