search

openbmc / phosphor-webui

Web-based user interface for managing OpenBMC systems
Apache License 2.0
37 stars 25 forks source link

NoAccess privilege user able to login via WEB Interface? #131

Open sivaprabug opened 2 years ago

sivaprabug commented 2 years ago

In the Local user management specification, they mentioned as NoAccess privileged is not allowed for the web interface.

image

But we create the NOAccess privileged user able to log in to the WebUI.

/login call succeded next call for /redfish/v1/AccountService/Accounts/noaccessuser

Setting cookie is failed:

image