-
Sub-task
-
Resolution: Done
-
Major
-
None
-
None
It seems the access control resources (/core-service=management/access=authorization) are addressable by the monitor role:
[standalone@localhost:9990 /] /core-service=management/access=authorization:read-resource(){roles=monitor} { "outcome" => "success", "result" => { "provider" => "simple", "use-realm-roles" => false, "constraint" => { "application-classification" => undefined, "sensitivity-classification" => undefined, "vault-expression" => undefined }, "role-mapping" => {"SuperUser" => undefined} } }
I think it should be 'addressable=false' for anybody except SuperUser and Administrator
- relates to
-
HAL-64 Role Assignment Configuration
- Resolved