[
https://issues.apache.org/jira/browse/SYNCOPE-1856?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17916371#comment-17916371
]
ASF subversion and git services commented on SYNCOPE-1856:
----------------------------------------------------------
Commit 4b183323ac38adac4c93f53c5faef2c7083c09d4 in syncope's branch
refs/heads/3_0_X from Matteo Tatoni
[ https://gitbox.apache.org/repos/asf?p=syncope.git;h=4b183323ac ]
[SYNCOPE-1856] Administrator can update and delete realms outside of the
granted subtree (#965)
> Administrator can update and delete realms outside of the granted subtree
> -------------------------------------------------------------------------
>
> Key: SYNCOPE-1856
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1856
> Project: Syncope
> Issue Type: Bug
> Components: console, core
> Affects Versions: 3.0.10, 4.0.0-M0
> Reporter: Matteo Tatoni
> Priority: Major
> Fix For: 3.0.11, 4.0.0
>
>
> When an administrator is granted the {{REALM_UPDATE}} entitlement for a
> specific {{realm}}, they are able to navigate in Console to a higher-level
> {{realm}} using the breadcrumb navigation, and can use the buttons in the
> panel to:
> * Create a new {{realm}} starting from the higher-level {{realm}},
> * Edit the higher-level {{realm}},
> * Delete the higher-level {{realm}}.
> This behavior can also be reproduced through REST API calls.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
