RBAC: Enable permission validation by default (#73804)

2 years ago · 2f22946f06
parent 5d14b6ba19
commit 2f22946f06
2 changed files with 6 additions and 0 deletions
--- a/conf/defaults.ini
+++ b/conf/defaults.ini
@ -872,6 +872,9 @@ permission_cache = true
 # Warning left to true, basic roles permissions will be reset on every boot
 reset_basic_roles = false

+# Validate permissions' action and scope on role creation and update
+permission_validation_enabled = true
+
 #################################### SMTP / Emailing #####################
 [smtp]
 enabled = false
--- a/conf/sample.ini
+++ b/conf/sample.ini
@ -824,6 +824,9 @@
 # Warning left to true, basic roles permissions will be reset on every boot
 #reset_basic_roles = false

+# Validate permissions' action and scope on role creation and update
+; permission_validation_enabled = true
+
 #################################### SMTP / Emailing ##########################
 [smtp]
 ;enabled = false