idea Re: Default security rules on extension : change for bundle - Status changed to: Closed - Archived in Suggest an Idea

Default security rules on extension : change for bundle

simonaubert — Sun, 07 Mar 2021 10:50:22 GMT

Hello all,

As of today, a ContentAdmin have by default the right to delete any extension, including ones in the Dashboard or Visualization Bundle. This can lead to big issues.

What I suggest :
-default rule "ContentAdmin" : do not include extension here

-2 new custom rules :
resource Extension_*
name : Extension_Content_Admin_no_bundle_all_rights
user.roles="ContentAdmin" and (resource.@ExtensionBundle!="Dashboard-bundle" and resource.@ExtensionBundle!="Visualization-bundle")
with all rights

resource Extension_*
name :Extension_Root_Admin_bundle
user.roles="RootAdmin" and (resource.@ExtensionBundle="Dashboard-bundle" or resource.@ExtensionBundle="Visualization-bundle")
with all rights

A new meme for your collection :

Best regards,

Simon

Re: Default security rules on extension : change for bundle - Status changed to: Open - Collecting Feedback

Ian_Crosland — Wed, 14 Dec 2022 11:43:43 GMT

From now on, please track this idea from the Ideation por...

Meghann_MacDonald — Wed, 02 Aug 2023 15:19:33 GMT

From now on, please track this idea from the Ideation portal.

Link to new idea

Meghann

NOTE: Upon clicking this link 2 tabs may open - please feel free to close the one with a login page. If you only see 1 tab with the login page, please try clicking this link first: Authenticate me! then try the link above again. Ensure pop-up blocker is off.

Re: Default security rules on extension : change for bundle - Status changed to: Closed - Archived

Ideation — Wed, 02 Aug 2023 15:19:34 GMT