Quantcast
Channel: SCN: Message List - Security
Viewing all articles
Browse latest Browse all 5338

Re: All Possible Values Field Authorization

$
0
0

Hi Pranjal

 

As soon as you remove AUTH (and then remove duplicates) you corrupt your data and will get erroneous results.

 

For example, if you have a role with two authorisations with different combinations as below:

 

 

Auth 1      OBJECT_A          ACTVT           01

                                            ITEM               A, B

 

Auth 2     OBJECT_A          ACTVT          03,

                                             ITEM               C

 

You will end up with

 

OBJECT_A     ACTVT 01, 03

                         ITEM     A, B, C

 

Your data then implies that the roles has access to ACTVT 01 for ITEM C as well as ACTVT 03 for ITEM A, B. This is incorrect

 

Regards

Colleen


Viewing all articles
Browse latest Browse all 5338

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>