Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Some roles are missing the _deleter counterpart #2964

Open
mmanes opened this issue Dec 30, 2024 · 1 comment
Open

Some roles are missing the _deleter counterpart #2964

mmanes opened this issue Dec 30, 2024 · 1 comment

Comments

@mmanes
Copy link

mmanes commented Dec 30, 2024

Some roles are missing the _deleter counterpart.

Description

The email_template_manager and entity_manager roles allow full access to their object types. This is inconsistent with the behavior with the other role types where there is an explicit *_deleter role.

Consider splitting out the delete permission into a separate role for consistency.

@mooreds
Copy link
Collaborator

mooreds commented Jan 6, 2025

The documentation portion of this issue is addressed here: FusionAuth/fusionauth-site#3448

There were quite a few manager roles with delete privileges.

Still agree that we should split out the roles to include a _deleter role for every entity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants