Project

General

Profile

Task #2165

Authorization policies - check change user type permission on backend

Added by Radek Tomiška 11 months ago. Updated 11 months ago.

Status:
Closed
Priority:
Normal
Category:
Authentication / Authorization
Target version:
Start date:
03/30/2020
Due date:
% Done:

100%

Estimated time:
Milestones:

Description

New base persmission 'CHANGEPROJECTION' was added for secure changing identity form form projection. This permission is used on frontend only - implement validation processor on identity and check permission on backend to - lookout, permission should be evaluated just when ''UPDATE'' permission is required (prevent check for internal processes like synchronization).


Related issues

Related to CzechIdM - Task #2105: Dynamic form for identitiesClosed03/09/2020

History

#1 Updated by Radek Tomiška 11 months ago

  • Related to Task #2105: Dynamic form for identities added

#2 Updated by Radek Tomiška 11 months ago

  • Status changed from New to In Progress
  • Target version changed from 10.3.0 to 10.2.0

#3 Updated by Radek Tomiška 11 months ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 0 to 90

It's implemented, commit:
https://github.com/bcvsolutions/CzechIdMng/commit/0243c5055ec66be17d73abe35571daf40527071d

Could you provide me a feedback, please?

#4 Updated by Vít Švanda 11 months ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Vít Švanda to Radek Tomiška
  • % Done changed from 90 to 100

I did review and test. Check on this permission works on BE now. Thanks for that.

#5 Updated by Radek Tomiška 11 months ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF

Go to top