cloudfoundry / cloudfoundry/stratos

User can't edit own profile and change own password in stratos

Open
#4,888 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

community
Dominant language
TypeScript
Stars
267
Forks
137
Avg merge
5h 14m
Merged PRs (30d)
77

Description

Stratos Version

4.4.0

Frontend Deployment type
  • Cloud Foundry Application (cf push)
Backend (Jet Stream) Deployment type
  • Cloud Foundry Application (cf push)
Expected behaviour

User should be allowed to edit own profile and password in stratos.

Actual behaviour

User must have scim.write scope to show edit button for own profile.

If i can track this correctly, theese changes is responsible - #4386 / #4839

According to documentation:

scim.write - This scope gives admin write access to all SCIM endpoints, /Users, and /Groups.

Is it really necessary that user must have this scope to edit own profile?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start from the own-profile edit-button visibility and password-edit permission checks implicated by the issue, then review the changes referenced in #4386 and #4839. Verify the UAA scope behavior described in the issue. Done means users can edit their own profile and password without scim.write while broader administrative access remains restricted.

Written by the indexing model from the issue text.

Assessment

Tech stack
angular, typescript
Domain
authentication, authorization, frontend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.