[jira] [Created] (ARGUS-74) Delegated admin can access all the policies through URL

["Velmurugan Periasamy (JIRA)" <ji...@apache.org>]

Velmurugan Periasamy created ARGUS-74:
-----------------------------------------

             Summary: Delegated admin can access all the policies through URL
                 Key: ARGUS-74
                 URL: https://issues.apache.org/jira/browse/ARGUS-74
             Project: Argus
          Issue Type: Bug
            Reporter: Velmurugan Periasamy


Steps to reproduce
1] Create an internal user and make the user delegated admin of any policy. 
2] Login with that user and try to read different different policies from URL.

Expected Result : User should be allowed to read only policies for which user has delegated admin rights.

Actual Result : User can read all the policies from URL. Also User can see all policies in a repository as long as user has admin permission to any one policy in that repository (happens in both UI and API)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)