Details
L3 - Default Description
What are the steps to reproduce your problem?
- In Webapps create the user, that is not the Camunda admin, but has access to Admin app
- Log in with this user
- Enter the URL http://localhost:8080/camunda/app/admin/default/#/system to access System tabs, that is not visible in the menu
What is the problem?
- user can see License information and even replace it with another valid license
What would be the expected behavior:
- user must not be able to see License information and replace it
Hints (optional):
ManagementService#getProperties must be available only for Camunda Admin