[Factory Configuration] Changing Platform Configuartions with default lifetime role "Access" possible

Forge Component
(23)
Published on 24 Feb by OutSystems R&D
23 votes
Published on 24 Feb by OutSystems R&D

Hello,

I checked to login in Factory Configuration with an user who has only the role "Access":

For tab "eSpaces" and "Shared Configurations" I am getting an error and can not change anything:

But I can open tab "Platform Configurations" and apply settings:


Best regards,

Magnus

Hi Magnus,

What I understand from the exception message is that you probably need more than "Access" to be able to make changes on those 2 screens.

Are you able to try that?

Hi Ozan,

yes, I need more than "Access" and that's perfectly fine :-)

But being able to change server configurations with role "Access" on the 3rd screen is a security hole. I would expect that Factory Configuration only can be used by IT Users with "Full Control".

Best regards,

Magnus

Magnus wrote:

Hi Ozan,

yes, I need more than "Access" and that's perfectly fine :-)

But being able to change server configurations with role "Access" on the 3rd screen is a security hole. I would expect that Factory Configuration only can be used by IT Users with "Full Control".

Best regards,

Magnus

Ah, I see your point. Indeed, that flaw can be reviewed.