magento / security-package

Magento Security Extensions
Open Software License 3.0
73 stars 69 forks source link

Move permission for Two Factor Auth to top #338

Open amenk opened 3 months ago

amenk commented 3 months ago

Fix: As a restricted user I want to be able to setup and login using TFA, without seeing an empty System -> Permissions menu

Description (*)

We have very restricted users who can only see a sales menu; now they should be able to use TFA which needs the Magento_TwoFactorAuth::tfa permission. But this would require to also see the system menu

Fixed Issues (if relevant)

Manual testing scenarios (*)

  1. give only a sales order menu and "Use Two Factor Auth" permission
  2. login using TFA, see only the sales menu

Contribution checklist (*)