markdomansky / WebJEA

WebJEA - Secure Self Service Web Forms from PowerShell Scripts
GNU General Public License v3.0
236 stars 27 forks source link

Permitted Groups problem #55

Closed toasti2000 closed 2 years ago

toasti2000 commented 3 years ago

Hello,

I am struggling with to secure my WebJEA instance only for people with access to any of the scripts within WebJEA.

Whatever I put it here as group - not working, all domain users can access the website:

"Title": "WebJEA", "defaultcommandid": "welcome", "basepath": "C:\webjea\scripts", "LogParameters": true, "permittedgroups": ["Domain\ADgroup"], "commands": [

I tried several groups and it does not change anything. All menu items are visible and usable. If i put in a star the permitted groups from the scripts are working - only menu items visible I am in the groups for.

Any idea what I can try?

So what I want to achieve is:

Thanks!

toasti2000 commented 3 years ago

Will the "main" permitted group overwrite the script permitted groups?

markdomansky commented 3 years ago

The top-level group grants access to all scripts. The intent is this group would be administrators. Any authenticated user will be able to access the site, but should not have access to the individual scripts if they aren't authorized.

stale[bot] commented 2 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.