NAR updates
Security changes
Warning |
---|
FIX Security issue! Previous rule WEDIA Packaged - Self user in objectdata/update did not prevent a user from changing its role. Find below new rule implementation |
objectdata/update
WEDIA Packaged - Self user
Rule details
Description:
A surfer can update its own user--> A surfer can update its own user as long as he doesn't change its role or role type
Old Expression:
Code Block @pkgIsSurferSelfUser()
New Expression:
Code Block @pkgIsSurferSelfUser() AND object.role = surfer.roleid AND object.pkgroletemplate = surfer.pkgroletemplate
Info |
---|
New objectactions domain action created: i18nFieldsTranslate |
objectactions domain
i18nFieldsTranslate(ADDED)
Action description
Description:
Enabled: true
Action parameters:
objectname:
wsnoheto.securite.parameter.LowerStringParameter
surfer:
wsnoheto.securite.parameter.SurferParameter
Rules:
WEDIA Packaged - Default rule
Rule details
Description: Relies on permissions granted to role
Enabled: true
Blocking: false
Expression:
Code Block @pkgV1ObjectActions('i18nFieldsTranslate')
WEDIA Packaged - Developper
Rule details
Description: Developers can do everything
Enabled: true
Blocking: false
Expression:
Code Block @pkgIsSurferDeveloper()
...
Info |
---|
applications domain is now activated by default |
applications
Enabled:
false--> true
Expand | ||
---|---|---|
| ||
Domains changesisAvailable
|
...
Expand | ||
---|---|---|
| ||
boardsmakePublicBoard
shareBoard
objectactionsbroadcastVideo
create
damimport
datavaluespicker
defineVideoPoster
delete
editPicture
editVideoChapters
editVideoSubtitles
embed
manageVideoCallToActions
manageVideoRolls
massimport
multiupdate
order
shareSocialNetworks
sliceVideo
view
objectdatabroadcastVideo
changestatus
defineVideoPoster
delete
editPicture
editVideoChapters
editVideoSubtitles
embed
i18nFieldsTranslate
insert
manageVideoCallToActions
manageVideoRolls
order
retrieveCaption
shareSocialNetworks
sliceVideo
update
view
objectstructdelete
insert
update
Macros changespkgIsObjectUserDeveloperOrRoleDeveleoper
pkgIsObjectUserOfTypeGroup
|
Portal configuration for upload feature
...