Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feature request: separate 'people search proxy user' for public people search #138

Open
mfaust78 opened this issue Feb 14, 2017 · 1 comment

Comments

@mfaust78
Copy link

Currently people search allows to use the logged in users rights or the proxy user. For the public people search the proxy user is used - this is suboptimal as the proxy user should have rights to attributes and even read to passwords in the password policy and write to certain attributes.
Now if one wants to show only a restricted set of attributes in the public people search and show more based on the logged in user, the rights for the main proxy user get complicated and easily errors happen.
Our usecase for a separate public prople search proxy would be:

  • simple rights for PWM proxy user
  • rights to 'public' attributes for "people search proxy user" (e.g. Name, First Name, Mail, Phone, Mobile, Title, etc.)
  • rights (using groups) to certain users (e.g. managers) to see further attributes (e.g. HomePhone, Private Mobile, Private address, etc).
    In such a setup it would be clear where the rights are coming from for the public people search and there is less risk that an admin changes the PWM proxy users rights and too much information is shown in the public pages.
@hirenThakor95

This comment was marked as spam.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants