-
Sub-task
-
Resolution: Done
-
Major
-
None
-
None
It seems the access control resources (/core-service=management/access=authorization) are addressable by the monitor role:
[standalone@localhost:9990 /] /core-service=management/access=authorization:read-resource(){roles=monitor}
{
"outcome" => "success",
"result" => {
"provider" => "simple",
"use-realm-roles" => false,
"constraint" => {
"application-classification" => undefined,
"sensitivity-classification" => undefined,
"vault-expression" => undefined
},
"role-mapping" => {"SuperUser" => undefined}
}
}
I think it should be 'addressable=false' for anybody except SuperUser and Administrator
- relates to
-
HAL-64 Role Assignment Configuration
-
- Resolved
-