Allow admins to Create A Token that has the permissions of a specific User
Right now, Users without any admin rights can't create tokens themselves. Admin's can only create tokens with Admin permissions.
We want an admin to be able to create a token which only has the permissions of a particular user so they can delegate out lower levels of permissions using tokens.
A Drop down on the create token page with users could work.
This would be the same for ca-admin as well, they could create tokens for any of their created users.
We want an admin to be able to create a token which only has the permissions of a particular user so they can delegate out lower levels of permissions using tokens.
A Drop down on the create token page with users could work.
This would be the same for ca-admin as well, they could create tokens for any of their created users.
Leave a comment
Only administrators can select a user for restricting permissions.
CA administrators cannot restrict permissions to other users - it's complicated as a CA admin could end up creating a token for a user that has permission to other CAs thus exposing data for another CA.
CA administrators cannot restrict permissions to other users - it's complicated as a CA admin could end up creating a token for a user that has permission to other CAs thus exposing data for another CA.