search

skoruba / IdentityServer4.Admin

The administration for the IdentityServer4 and Asp.Net Core Identity
MIT License
3.57k stars 1.15k forks source link

Admin API access #540

Open jack1232 opened 4 years ago

jack1232 commented 4 years ago

I created a MVC client, from which I want to access the user claims from /api/Users/{id}/Claims. It works when I log in as the user with admin role. However, it returns 403 forbidden error if the user without the admin role. I just want to know this is by design or I miss something here? The user should be able to access his own claims even that user does not have the admin role.

Thanks Jack

skoruba commented 4 years ago

It is by design, enpoints of AdminUI is able to access only admin. But you can change it according to your requirements.

jack1232 commented 4 years ago

Great. Thanks