[
https://issues.apache.org/jira/browse/SYNCOPE-1856?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17916413#comment-17916413
]
ASF subversion and git services commented on SYNCOPE-1856:
----------------------------------------------------------
Commit e4ce8ef175f337c6bb3c647f1991f86ede23b8d5 in syncope's branch
refs/heads/master from Matteo Tatoni
[ https://gitbox.apache.org/repos/asf?p=syncope.git;h=e4ce8ef175 ]
[SYNCOPE-1856] Administrator can update and delete realms outside of the
granted subtree (#965)
> Administrator can update and delete realms outside of the granted subtree
> -------------------------------------------------------------------------
>
> Key: SYNCOPE-1856
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1856
> Project: Syncope
> Issue Type: Bug
> Components: console, core
> Affects Versions: 3.0.10, 4.0.0-M0
> Reporter: Matteo Tatoni
> Assignee: Francesco Chicchiriccò
> Priority: Major
> Fix For: 3.0.11, 4.0.0
>
>
> When an administrator is granted the {{REALM_UPDATE}} entitlement for a
> specific {{realm}}, they are able to navigate in Console to a higher-level
> {{realm}} using the breadcrumb navigation, and can use the buttons in the
> panel to:
> * Create a new {{realm}} starting from the higher-level {{realm}},
> * Edit the higher-level {{realm}},
> * Delete the higher-level {{realm}}.
> This behavior can also be reproduced through REST API calls.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
