diff options
| author | Gunnar Mills <gmills@us.ibm.com> | 2020-01-29 15:21:30 -0600 |
|---|---|---|
| committer | Gunnar Mills <gmills@us.ibm.com> | 2020-02-10 18:34:06 +0000 |
| commit | 3c5a376e005d97f5d586c5aa163267eb3b0381aa (patch) | |
| tree | e48d30abe9e3c51041ad58c361668376b8abc62c | |
| parent | 6f44b7524f1d48d009ec87b1309481c7905b13b4 (diff) | |
| download | bmcweb-3c5a376e005d97f5d586c5aa163267eb3b0381aa.tar.gz bmcweb-3c5a376e005d97f5d586c5aa163267eb3b0381aa.zip | |
Update AccountService Privilege
"GET" should be a "Login" Privilege for the AccountService
resource. This makes sense, a "Readonly" and "Operator" user
should be able to see properties like MaxPasswordLength and
MinPasswordLength since they are allowed to change their own
password.
This was changed in Redfish 2019.3, redfish issue 1914 explains
more.
From Redfish_1.0.4_PrivilegeRegistry.json:
"Entity": "AccountService",
"OperationMap": {
"GET": [
{
"Privilege": [
"Login"
]
}
],
"HEAD": [
{
"Privilege": [
"Login"
]
}
],
"PATCH": [
{
"Privilege": [
"ConfigureUsers"
]
}
],
"PUT": [
{
"Privilege": [
"ConfigureUsers"
]
}
],
"DELETE": [
{
"Privilege": [
"ConfigureUsers"
]
}
],
"POST": [
{
"Privilege": [
"ConfigureUsers"
]
}
]
Change-Id: Iab8acbac97a58aed865bf94f665d6c9a32de81dd
Tested: Build for Witherspoon and AccountService looks good.
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
| -rw-r--r-- | redfish-core/lib/account_service.hpp | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/redfish-core/lib/account_service.hpp b/redfish-core/lib/account_service.hpp index 017a83d..600c1a2 100644 --- a/redfish-core/lib/account_service.hpp +++ b/redfish-core/lib/account_service.hpp @@ -560,8 +560,7 @@ class AccountService : public Node Node(app, "/redfish/v1/AccountService/"), app(app) { entityPrivileges = { - {boost::beast::http::verb::get, - {{"ConfigureUsers"}, {"ConfigureManager"}}}, + {boost::beast::http::verb::get, {{"Login"}}}, {boost::beast::http::verb::head, {{"Login"}}}, {boost::beast::http::verb::patch, {{"ConfigureUsers"}}}, {boost::beast::http::verb::put, {{"ConfigureUsers"}}}, |
