From b64249742ea8fa18e0743cca4097f44db49aeed9 Mon Sep 17 00:00:00 2001 From: duttarnab Date: Sun, 6 Sep 2026 12:43:14 +0530 Subject: [PATCH 1/2] feat: reviewing the access-control of Admin UI for the polices created for different roles Signed-off-by: duttarnab --- .../adminUIResourceScopesMapping.ldif | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/flex-linux-setup/flex_linux_setup/templates/adminUIResourceScopesMapping.ldif b/flex-linux-setup/flex_linux_setup/templates/adminUIResourceScopesMapping.ldif index 062797a76b..f7fc3c741b 100644 --- a/flex-linux-setup/flex_linux_setup/templates/adminUIResourceScopesMapping.ldif +++ b/flex-linux-setup/flex_linux_setup/templates/adminUIResourceScopesMapping.ldif @@ -639,3 +639,24 @@ jansResource: adminUISession jansScope: https://jans.io/oauth/jans-auth-server/config/adminui/user/session.delete objectClass: top objectClass: adminUIResourceScopesMapping + +dn: inum=ce01fe2a-a183-bb71-ac4b-ddfef88d1cd0,ou=adminUIResourceScopesMapping,ou=admin-ui,o=jans +inum: ce01fe2a-a183-bb71-ac4b-ddfef88d1cd0 +jansAccessType: READ +jansResource: adminUIEssential +jansScope: https://jans.io/oauth/jans-auth-server/config/adminui/properties.readonly +jansScope: https://jans.io/oauth/config/data.readonly +jansScope: https://jans.io/oauth/config/logging.readonly +jansScope: https://jans.io/oauth/jans-auth-server/config/adminui/security.readonly +jansScope: https://jans.io/oauth/jans-auth-server/config/adminui/license.readonly +objectClass: top +objectClass: adminUIResourceScopesMapping + +dn: inum=ca01fe2a-b183-bc71-ad4b-defef88d1cd0,ou=adminUIResourceScopesMapping,ou=admin-ui,o=jans +inum: ca01fe2a-b183-bc71-ad4b-defef88d1cd0 +jansAccessType: WRITE +jansResource: adminUIEssential +jansScope: https://jans.io/oauth/jans-auth-server/config/adminui/logging.write +jansScope: https://jans.io/oauth/jans-auth-server/config/adminui/properties.write +objectClass: top +objectClass: adminUIResourceScopesMapping \ No newline at end of file From 4576363579eb35208d1f9a491ca877c096683469 Mon Sep 17 00:00:00 2001 From: duttarnab Date: Mon, 7 Sep 2026 22:02:08 +0530 Subject: [PATCH 2/2] chore: reviewing the access-control of Admin UI for the polices created for different roles Signed-off-by: duttarnab --- .../flex_linux_setup/templates/adminUIResourceScopesMapping.ldif | 1 + 1 file changed, 1 insertion(+) diff --git a/flex-linux-setup/flex_linux_setup/templates/adminUIResourceScopesMapping.ldif b/flex-linux-setup/flex_linux_setup/templates/adminUIResourceScopesMapping.ldif index f7fc3c741b..a71f5ba4e4 100644 --- a/flex-linux-setup/flex_linux_setup/templates/adminUIResourceScopesMapping.ldif +++ b/flex-linux-setup/flex_linux_setup/templates/adminUIResourceScopesMapping.ldif @@ -649,6 +649,7 @@ jansScope: https://jans.io/oauth/config/data.readonly jansScope: https://jans.io/oauth/config/logging.readonly jansScope: https://jans.io/oauth/jans-auth-server/config/adminui/security.readonly jansScope: https://jans.io/oauth/jans-auth-server/config/adminui/license.readonly +jansScope: https://jans.io/oauth/config/fido2-metrics.readonly objectClass: top objectClass: adminUIResourceScopesMapping