cloudfoundry / cloudfoundry/stratos
User can't edit own profile and change own password in stratos
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 267
- Forks
- 137
- Avg merge
- 5h 14m
- Merged PRs (30d)
- 77
Description
Stratos Version
4.4.0
Frontend Deployment type
- Cloud Foundry Application (cf push)
Backend (Jet Stream) Deployment type
- Cloud Foundry Application (cf push)
Expected behaviour
User should be allowed to edit own profile and password in stratos.
Actual behaviour
User must have scim.write scope to show edit button for own profile.
If i can track this correctly, theese changes is responsible - #4386 / #4839
According to documentation:
scim.write - This scope gives admin write access to all SCIM endpoints, /Users, and /Groups.
Is it really necessary that user must have this scope to edit own profile?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start from the own-profile edit-button visibility and password-edit permission checks implicated by the issue, then review the changes referenced in #4386 and #4839. Verify the UAA scope behavior described in the issue. Done means users can edit their own profile and password without scim.write while broader administrative access remains restricted.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- angular, typescript
- Domain
- authentication, authorization, frontend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100