PRODUCT IOTS » product-uem 7.0.0 GA

Environment details
620 cloud server

Prerequisites
limited permission user
permission list [1]
published app

Steps
create a role with below permission set [1] and assign i to a new user.
Go to app store
Click on subscribe and install/uninstall

Description
Currently there is no scope/permission is being checked in the app store install/uninstall table view.
Need to restrict the view of installable methods [2] according to permissions.
EX: If a user doesnt have group view permission they should not be able to view group tab in the app store.
/permission/admin/device-mgt/admin/groups/view

Result

[2]

[1] {
"roleName":"PRIMARY/limitedPermRole",
"permissions":[
"/permission/admin/device-mgt/device-type/features/view",
"/permission/admin/device-mgt/device-type/config/view",
"/permission/admin/device-mgt/device-type/view",
"/permission/admin/device-mgt/devices/disenroll/android",
"/permission/admin/device-mgt/devices/enroll/android",
"/permission/admin/device-mgt/devices/any-device/permitted-actions-under-owning-device",
"/permission/admin/device-mgt/devices/any-group/permitted-actions-under-owning-group",
"/permission/admin/device-mgt/devices/owning-device/activities/view",
"/permission/admin/device-mgt/devices/owning-device/features/view",
"/permission/admin/device-mgt/devices/owning-device/add",
"/permission/admin/device-mgt/devices/owning-device/operations/view",
"/permission/admin/device-mgt/devices/owning-device/operations/android/file-transfer",
"/permission/admin/device-mgt/devices/owning-device/operations/android/alternate-install",
"/permission/admin/device-mgt/devices/owning-device/operations/android/applications",
"/permission/admin/device-mgt/devices/owning-device/operations/android/location",
"/permission/admin/device-mgt/devices/owning-device/operations/android/info",
"/permission/admin/device-mgt/devices/owning-device/operations/android/install-app",
"/permission/admin/device-mgt/devices/owning-device/details/view",
"/permission/admin/device-mgt/devices/owning-device/view",
"/permission/admin/device-mgt/devices/operations/status-update",
"/permission/admin/device-mgt/admin/device-type/modify",
"/permission/admin/device-mgt/admin/device-type/view",
"/permission/admin/device-mgt/admin/device-type/config",
"/permission/admin/device-mgt/admin/groups/view",
"/permission/admin/device-mgt/admin/groups/count",
"/permission/admin/device-mgt/admin/groups/add",
"/permission/admin/device-mgt/admin/devices/view",
"/permission/admin/device-mgt/admin/devices/usage/view",
"/permission/admin/device-mgt/admin/devices/permanent-delete",
"/permission/admin/device-mgt/metadata/view",
"/permission/admin/device-mgt/metadata/update",
"/permission/admin/device-mgt/metadata/create",
"/permission/admin/device-mgt/whitelabel/view",
"/permission/admin/device-mgt/groups/add",
"/permission/admin/device-mgt/groups/device-groups/view",
"/permission/admin/device-mgt/groups/specified-groups/view",
"/permission/admin/device-mgt/groups/device-types/view",
"/permission/admin/device-mgt/groups/view",
"/permission/admin/device-mgt/groups/devices/count",
"/permission/admin/device-mgt/groups/devices/view",
"/permission/admin/device-mgt/groups/devices/assign",
"/permission/admin/device-mgt/groups/devices/add",
"/permission/admin/device-mgt/groups/devices/remove",
"/permission/admin/device-mgt/groups/remove",
"/permission/admin/device-mgt/groups/update",
"/permission/admin/device-mgt/groups/share",
"/permission/admin/device-mgt/groups/roles/view",
"/permission/admin/device-mgt/groups/count",
"/permission/admin/app-mgt/life-cycle/application/approve",
"/permission/admin/app-mgt/life-cycle/application/create",
"/permission/admin/app-mgt/life-cycle/application/reject",
"/permission/admin/app-mgt/life-cycle/application/block",
"/permission/admin/app-mgt/life-cycle/application/review",
"/permission/admin/app-mgt/life-cycle/application/retire",
"/permission/admin/app-mgt/life-cycle/application/deprecate",
"/permission/admin/app-mgt/life-cycle/application/publish",
"/permission/admin/app-mgt/store/application/view",
"/permission/admin/app-mgt/store/application/modify",
"/permission/admin/app-mgt/store/subscription/install",
"/permission/admin/app-mgt/store/subscription/uninstall",
"/permission/admin/app-mgt/store/admin/subscription/view",
"/permission/admin/app-mgt/store/admin/subscription/modify",
"/permission/admin/app-mgt/publisher/admin/application/update",
"/permission/admin/app-mgt/publisher/application/view",
"/permission/admin/app-mgt/publisher/application/update",
"/permission/admin/app-mgt/publisher/application/upload"
],
"removedPermissions":[

]
}