View Issue Details

IDProjectCategoryView StatusLast Update
000913910000-018: Role-Based SecuritySpecpublic2023-09-21 12:12
ReporterKevin Herron (Inductive Automation) Assigned ToMatthias Damm  
PrioritynormalSeverityminorReproducibilityN/A
Status closedResolutionno change required 
Summary0009139: Incorrect description of default Identities for the Anonymous Role
Description

In 4.3 RoleSet it says:

The default Identities for the Anonymous Role should be Identities with the criteriaType
IdentityCriteriaType.Anonymous and the criteriaType IdentityCriteriaType.AuthenticatedUser.

I believe this is incorrect and should not include IdentityCriteriaType.AuthenticatedUser, i.e. it should read:

The default Identities for the Anonymous Role should be Identities with the criteriaType
IdentityCriteriaType.Anonymous.

TagsNo tags attached.
Commit Version
Fix Due Date

Activities

Matthias Damm

2023-09-20 11:46

developer   ~0020030

The following definition is correct:
The default Identities for the Anonymous Role should be Identities with the criteriaType IdentityCriteriaType.Anonymous and the criteriaType IdentityCriteriaType.AuthenticatedUser.

It is intentional to include IdentityCriteriaType.AuthenticatedUser as default. This makes it easier to configure RolePermissions for nodes that include Anonymous since it is expected that AuthenticatedUser has minimum the permissions Anonymous has. Therefore it is enough to add Anonymous to the RolePermissions if Anonymous and AuthenticatedUser have the same permissions.

Jim Luth

2023-09-21 12:12

administrator   ~0020038

Agreed to no-fix in F2F.

Issue History

Date Modified Username Field Change
2023-09-09 00:02 Kevin Herron (Inductive Automation) New Issue
2023-09-20 11:46 Matthias Damm Assigned To => Matthias Damm
2023-09-20 11:46 Matthias Damm Status new => resolved
2023-09-20 11:46 Matthias Damm Resolution open => no change required
2023-09-20 11:46 Matthias Damm Note Added: 0020030
2023-09-21 12:12 Jim Luth Status resolved => closed
2023-09-21 12:12 Jim Luth Note Added: 0020038