| [SICSR-15773] Able to edit areas in System Parameters Maintenance although only view rights | |
|---|---|
| Product Line: | P&C |
| Component/s: | Security |
| Affects Version/s: | SICS 4.8.6 SSP4 |
| Fix Version/s: | SICS 4.9.3 SICS 4.8.6 SSP6 SICS 4.8.6 SSP7 |
| Customer: | Partner Re |
| External Issue ID: | IN170174 |
Problem:
In P&C and Life there are a number of System Parameters that are not covered by the System Administration update use case (or another specific update use case) which means it is not possible to securely assign System Administration view only access to users.
Solution:
The editing of system parameters should be entirely covered by an update use case (either System Administration update or another specific update use case).
Workaround:
Do not provide System Adminstration view only access to users.
Root Cause:
Extent of Impact:
Impact on Existing Data
Recovery Method for Existing Data Affected