You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@syncope.apache.org by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2025/01/23 13:53:00 UTC
[jira] [Resolved] (SYNCOPE-1856) Administrator can update and delete realms outside of the granted subtree
[ https://issues.apache.org/jira/browse/SYNCOPE-1856?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Francesco Chicchiriccò resolved SYNCOPE-1856.
---------------------------------------------
Resolution: Fixed
> Administrator can update and delete realms outside of the granted subtree
> -------------------------------------------------------------------------
>
> Key: SYNCOPE-1856
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1856
> Project: Syncope
> Issue Type: Bug
> Components: console, core
> Affects Versions: 3.0.10, 4.0.0-M0
> Reporter: Matteo Tatoni
> Assignee: Francesco Chicchiriccò
> Priority: Major
> Fix For: 3.0.11, 4.0.0
>
>
> When an administrator is granted the {{REALM_UPDATE}} entitlement for a specific {{realm}}, they are able to navigate in Console to a higher-level {{realm}} using the breadcrumb navigation, and can use the buttons in the panel to:
> * Create a new {{realm}} starting from the higher-level {{realm}},
> * Edit the higher-level {{realm}},
> * Delete the higher-level {{realm}}.
> This behavior can also be reproduced through REST API calls.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)