Bug #12194
openTask #12195: Permission related issues when creating a limited permission user
Initial network calls in all device page load send user API call
100%
Description
Environment details
620 cloud server
Prerequisites
limited permission user
permission list [1]
Steps
create a role with below permission set [1] and assign i to a new user.
load all device page
Description
there is a error coming due to not having the scope for user api call [2].
There is a API call to load users going when All Device Page load.
this user load API call should not sent in the initially All device page laod
response: [3]
Result
[2]
[1]
{
"roleName":"PRIMARY/limitedPermRole",
"permissions":[
"/permission/admin/device-mgt/device-type/features/view",
"/permission/admin/device-mgt/device-type/config/view",
"/permission/admin/device-mgt/device-type/view",
"/permission/admin/device-mgt/devices/disenroll/android",
"/permission/admin/device-mgt/devices/enroll/android",
"/permission/admin/device-mgt/devices/any-device/permitted-actions-under-owning-device",
"/permission/admin/device-mgt/devices/any-group/permitted-actions-under-owning-group",
"/permission/admin/device-mgt/devices/owning-device/activities/view",
"/permission/admin/device-mgt/devices/owning-device/features/view",
"/permission/admin/device-mgt/devices/owning-device/add",
"/permission/admin/device-mgt/devices/owning-device/details/view",
"/permission/admin/device-mgt/devices/owning-device/view",
"/permission/admin/device-mgt/admin/device-type/modify",
"/permission/admin/device-mgt/admin/device-type/view",
"/permission/admin/device-mgt/admin/device-type/config",
"/permission/admin/device-mgt/admin/devices/view",
"/permission/admin/device-mgt/admin/devices/usage/view",
"/permission/admin/device-mgt/admin/devices/permanent-delete",
"/permission/admin/device-mgt/admin/devices/update-enrollment",
"/permission/admin/device-mgt/whitelabel/view",
"/permission/admin/app-mgt/life-cycle/application/approve",
"/permission/admin/app-mgt/life-cycle/application/create",
"/permission/admin/app-mgt/life-cycle/application/reject",
"/permission/admin/app-mgt/life-cycle/application/block",
"/permission/admin/app-mgt/life-cycle/application/review",
"/permission/admin/app-mgt/life-cycle/application/retire",
"/permission/admin/app-mgt/life-cycle/application/deprecate",
"/permission/admin/app-mgt/life-cycle/application/publish",
"/permission/admin/app-mgt/store/application/view",
"/permission/admin/app-mgt/store/application/modify",
"/permission/admin/app-mgt/store/subscription/install",
"/permission/admin/app-mgt/store/subscription/uninstall",
"/permission/admin/app-mgt/publisher/admin/application/update",
"/permission/admin/app-mgt/publisher/application/view",
"/permission/admin/app-mgt/publisher/application/update",
"/permission/admin/app-mgt/publisher/application/upload"
],
"removedPermissions":[
]
}
[3] {"code":403,"data":"Unauthorized to access the API","status":0}
Files