Hi Dilini, There is a good chance of this being a bug in MB side, if they have not used proper permissions for the services, service operations and/or UI menus items. Or else they could be using contradicting permissions for any of the above. Have you confirmed with MB team that they have used permissions properly?
I would suggest that you clear it from MB side first, and confirm that this is indeed an issue in permission management component, and then we can take a look at the issue, because AFAIK we don't have such issues in IS. For now I will move the issue to MB project [1], if MB team can confirm as this is happening due to a bug in permission management, then you can move it back to IDENTITY. [1] https://wso2.org/jira/browse/MB-1270 Regards. On Fri, Sep 11, 2015 at 3:25 PM, Dilini Gunatilake <[email protected]> wrote: > Hi All, > > This is regarding a known issue of the permission tree. When you try to > configure permissions of a Role in Management Console, we can either select > the parent and enable all the permissions under the parent or deselect the > parent and enable only few permissions under the parent. In this case, even > it is possible to select only few permissions in the UI, it does not > apply. > > For example, in Message Broker (MB), there are permissions under Queues to > Add, Browse, Delete and Purge queues. If I want to allow a user only to Add > and Browse queues, I will have to deselect Queue parent element and select > only Add and Browse child elements. After applying this, the user will not > be able to access the entire Queue section, not only Purge and Delete > functions. > > I have also raised an issue in JIRA [1]. Can you please explain how to > achieve the above mentioned scenario in MB? > > [1] https://wso2.org/jira/browse/IDENTITY-3573 > > Thank you. > > Regards, > > -- > > *Dilini GunatilakeSoftware Engineer - QA Team* > Mobile : +94 (0) 771 162518 > [email protected] > -- Thanks & Regards, *Johann Dilantha Nallathamby* Technical Lead & Product Lead of WSO2 Identity Server Integration Technologies Team WSO2, Inc. lean.enterprise.middleware Mobile - *+94777776950* Blog - *http://nallaa.wordpress.com <http://nallaa.wordpress.com>*
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
