Improvement #6546
Prevent the modification of setting parameters
100%
Description
Setting parameters (SE, SG) can be modified online using the services of the setting group control block model.
Based on ACSI services, the SGCB services cannot be blocked.
Users want to be able to prevent from unwanted modification of setting parameters.
Proposal descriptions
Create a means for a user to block/unblock the 'ConfirmEditSGValues' service.
Side note: Discuss the effect of changing the active setting group. Changing the active setting group is an operative measure. Nevertheless, it can lead to a malfunction when changing to another SG and hence activating an unappropriate setting value.
Updated by Carlos Rodriguez del Castillo about 1 year ago
- Discuss in Upcoming Meeting changed from No to Yes
Updated by Vladan Cvejic about 1 year ago
- Tracker changed from Bug to Improvement
- Category set to Solved / Missunderstanding
- Status changed from New to Closed
- % Done changed from 0 to 100
- Discuss in Upcoming Meeting changed from Yes to No
Discussion and conclusion: This shall be a matter of cybersecurity and not of a core model change. Thus, if it is needed to prevent unwanted setting changes - it shall be a question of RBAC application. For example, protection role shall have rights to change settings related to protection etc.
For general offline blocking - valKind is an option.