[
https://issues.apache.org/jira/browse/SYNCOPE-1856?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Francesco Chicchiriccò updated SYNCOPE-1856:
--------------------------------------------
Summary: Administrator can update and delete realms outside of the granted
subtree (was: A user can edit, create, and delete realms above their own)
> Administrator can update and delete realms outside of the granted subtree
> -------------------------------------------------------------------------
>
> Key: SYNCOPE-1856
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1856
> Project: Syncope
> Issue Type: Bug
> Components: console, core
> Affects Versions: 3.0.10, 4.0.0-M0
> Reporter: Matteo Tatoni
> Priority: Major
> Fix For: 3.0.11, 4.0.0
>
>
> When a user is defined in a specific {{realm}} but navigates to a
> higher-level {{realm}} using the breadcrumb navigation, they can use the
> buttons in the panel to:
> * Create a new {{realm}} starting from the higher-level {{realm}},
> * Edit the higher-level {{realm}},
> * Delete the higher-level {{realm}}.
> This behavior can also be reproduced through REST API calls.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
