Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] Support enable/disable inheritence for Security permissions #848

Closed
ishitam8 opened this issue Oct 24, 2019 · 1 comment
Labels
command enhancement Feature Feature Work required.

Comments

@ishitam8
Copy link
Member

Is your feature request related to a problem? Please describe.
Currently, we can't turn on/off inheritance for a set of permissions for a given user/group and security token.

@ishitam8 ishitam8 added Feature Feature Work required. command enhancement labels Oct 24, 2019
@ishitam8
Copy link
Member Author

The inheritPermissions flag is associated with a token or a resource rather than a group or identity.
So, when you change inheritPermssions flag for a token, it will be reflected for every group or users already added or are going to be added in future.

These requires commands related to update/delete/list Access control lists.
Currently all our commands are associated with modifying an entry(ACE) in ACL and not the ACL itself.

We are not planning to add the commands related to ACL as of now, since the listing of ACL is currently broken due to lack of pagination feature in the Security APIs [and the access control list is usually very long due to the reason that its an extensive list of tokens for all users/groups associated with that resource]

We shall revisit this feature once the pagination is added to the corresponding security APIs.
Till then, only way to update inheritance-flag for your token is to do http POST request on the token

POST  https://dev.azure.com/ORG_NAME/_apis/accesscontrollists/<security-namespace-id>?api-version=5.1-preview.1
{
                "value":[
                                                                {
                                                                                "inheritPermissions": false,
                                                                                "token": <SECURITY_TOKEN>
                                                                }
                             ]
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
command enhancement Feature Feature Work required.
Projects
None yet
Development

No branches or pull requests

1 participant