Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

restore restrictive permissions for GET /mdm/apple and adjust UI (#10282)

Browse Source 
Related to #10121 this reverts #10107, and modifies the UI to use
`mdm.enabled_and_configured` instead of the `GET /mdm/apple` endpoint so
we don't face permissions issues and Maintainers are able to see the
Controls page.

More details and rationale in
https://github.com/fleetdm/fleet/issues/10121#issuecomment-1450335235

Tested with Admins, Maintainers and Observers
This commit is contained in:
Roberto Dip
2023-03-06 16:54:37 -03:00
committed by GitHub
parent 6ff2c449cf
commit 9fb8fa464c
4 changed files with 31 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/Using-Fleet/Permissions.md
+3 -6
View File
@@ -41,9 +41,9 @@ Users with the Admin role receive all permissions.
| Edit [agent options for hosts assigned to teams](https://fleetdm.com/docs/using-fleet/configuration-files#team-agent-options)\* | | | ✅ |
| Initiate [file carving](https://fleetdm.com/docs/using-fleet/rest-api#file-carving) | | ✅ | ✅ |
| Retrieve contents from file carving | | | ✅ |
| View Apple mobile device management (MDM) certificate information | | ✅ | ✅ |
| View Apple business manager (BM) information | | ✅ | ✅ |
| Generate Apple mobile device management (MDM) certificate signing request (CSR) | | ✅ | ✅ |
| View Apple mobile device management (MDM) certificate information | | | ✅ |
| View Apple business manager (BM) information | | | ✅ |
| Generate Apple mobile device management (MDM) certificate signing request (CSR) | | | ✅ |
| View disk encryption key for macOS hosts enrolled in Fleet's MDM | ✅ | ✅ | ✅ |
| Create edit and delete configuration profiles for macOS hosts enrolled in Fleet's MDM | | ✅ | ✅ |
@@ -89,9 +89,6 @@ Users that are members of multiple teams can be assigned different roles for eac
| Create, edit, and delete [team enroll secrets](https://fleetdm.com/docs/using-fleet/rest-api#get-enroll-secrets-for-a-team) | | ✅ | ✅ |
| Edit [agent options](https://fleetdm.com/docs/using-fleet/configuration-files#agent-options) | | | ✅ |
| Initiate [file carving](https://fleetdm.com/docs/using-fleet/rest-api#file-carving) | | ✅ | ✅ |
| View Apple mobile device management (MDM) certificate information | | ✅ | ✅ |
| View Apple business manager (BM) information | | ✅ | ✅ |
| Generate Apple mobile device management (MDM) certificate signing request (CSR) | | ✅ | ✅ |
| View disk encryption key for macOS hosts enrolled in Fleet's MDM | ✅ | ✅ | ✅ |
| Create edit and delete configuration profiles for macOS hosts enrolled in Fleet's MDM | | ✅ | ✅ |