Closed LucaCinquini closed 7 years ago
Now the CoG project roles are displayed only if the user logged in is the same as the user profile, or the user logged in is a project or site administrator.
Can't see this action without an IDP but I see the code change.
Who: NOAA security scan
Currently, the user profile page shows the user roles for each project, such as 'admin' role. This information is sensitive and can be used to obtain privileged accounts.