Skip to content

fix (jans-config-api): the admin-ui role/permission/mapping delete apis are not protected by appropriate permissions #2991

Closed
@duttarnab

Description

The following admin-UI delete APIs should be protected by appropriate permissions

API Permission
/admin-ui/adminUIRoles/{adminUIRole} https://jans.io/oauth/jans-auth-server/config/adminui/user/role.delete
/admin-ui/adminUIPermissions/{adminUIPermission} https://jans.io/oauth/jans-auth-server/config/adminui/user/permission.delete
/admin-ui/adminUIRolePermissionsMapping/{adminUIRole} https://jans.io/oauth/jans-auth-server/config/adminui/user/rolePermissionMapping.delete

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

Labels

comp-jans-config-apiComponent affected by issue or PRkind-bugIssue or PR is a bug in existing functionality

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions