search

SecurityRiskAdvisors / VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
1.36k stars 161 forks source link

User Access Management #63

Closed SolAngelus closed 4 years ago

SolAngelus commented 4 years ago

I've begun creating accounts for team members and found that the user role has the same or very similar to the admin role.

Is there any documentation currently available that shows the differences between the two roles?

Is there any controls that I am missing either in the web gui or server side that would allow a admin to tweak these roles?

If not, is this something that is planned for the future?

thebleucheese commented 4 years ago

Currently, there are only 3 roles:

Admin/user are pretty similar, but the normal User role can't perform user management. Read-only can't write data to the system and is just meant to view reports/test data.

There are plans in our development roadmap for much more detailed access control following some general AuthN/AuthZ improvements that are needed to support those features.

SolAngelus commented 4 years ago

Thanks for the insight. Closing.