fix (jans-config-api): the admin-ui role/permission/mapping delete apis are not protected by appropriate permissions #2991
Closed
Description
The following admin-UI delete APIs should be protected by appropriate permissions
API | Permission |
---|---|
/admin-ui/adminUIRoles/{adminUIRole} | https://jans.io/oauth/jans-auth-server/config/adminui/user/role.delete |
/admin-ui/adminUIPermissions/{adminUIPermission} | https://jans.io/oauth/jans-auth-server/config/adminui/user/permission.delete |
/admin-ui/adminUIRolePermissionsMapping/{adminUIRole} | https://jans.io/oauth/jans-auth-server/config/adminui/user/rolePermissionMapping.delete |
Activity