How to deny to modify own user profile

[m.fa...@gmail.com]

Hello all Rundeck users!

I have a simple question.

I would like to prevent users to modify their profile (Email, First Name, Last Name).

So I read at the manual and I wrote this policy:

description: Do not allow to modify own user profile
context:
  application: 'rundeck'
for:
  resource:
    - equals:
        kind: 'user'
      deny:
        - 'admin'
by:
  username:
    - 'ma...@example.com'

After that, when I login with "ma...@example.com" I'm still able to modify the user profile.

Where is the mistake?

Thank you very much

Kind Regards

Marco

[rac...@rundeck.com]

Hi,

Even with this restrictive definition, I can edit the user info in their profile

--- by: username: user description: desc for: resource: - deny: - '*' equals: kind: user context: application: rundeck

Could you please file a new issue here?

Thanks and regards!

​

[Marco Favero]

Hello,

  I opened this: https://github.com/rundeck/rundeck/issues/9683

Thank you!

Kind Regards

Marco

--
You received this message because you are subscribed to a topic in the Google Groups "rundeck-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/rundeck-discuss/Ed47l_-0kiI/unsubscribe.
To unsubscribe from this group and all its topics, send an email to rundeck-discu...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/rundeck-discuss/fd166fed-2899-4350-a86b-56da1dc98137n%40googlegroups.com.