Release Notes 1.5

What’s New

Introduction of Fallback Policies

With a fallback policy you can now define a policy for all users to whom no explicit policy is assigned. So you can now define extended access permissions to a certain group, while you can assign basic permissions for "everybody else".

Support for alternative ArcGIS Server URLs in Manager UI Configuration

For the Manager UI, you need to configure the ArcGIS Server URL(s) used with security.manager NEXT during the installation. In some setups, it is necessary to configure the direct server URL (port 6443). If you still want to use the Web Adaptor URL in the service status information in the Service Manager, you can now configure an alternative URL to be used there.

Display of Effective Permissions in the Groups View of Policy Explorer

In the groups view, so far only permissions were displayed that were directly assigned to the selected group. However, there can be other policies which are effective for this group, such as those for enhancedSecurity_any or enhancedSecurity_authenticated. Now all these permissions are displayed to avoid misinterpretations.

Display of the Folder in Addition to the Service Name in Policy Editor

In the Edit permissions view of the Manager UI, so far only the service name was displayed. Since it is possible to use the same name for different services in different folders, now the folder name is added for more clarity.

Update Notes

If you skip several versions during the update, please also follow all update notes of the intervening versions.

Policy JSON Schema Update

If you edit policies in a JSON editor with the help of the policy JSON schema, and you want to make use of the new policy features, the schema needs to be updated. To do so, please update the URL to https://raw.githubusercontent.com/conterra/policies-json/1.5.0/schema/policies.schema.json, or use the schema provided in folder [SECMAN_DIR]/resources/policies.schema.json of the security.manager NEXT distribution.

Policies should begin with

{
    "$schema": "https://raw.githubusercontent.com/conterra/policies-json/1.5.0/schema/policies.schema.json",
    ...
}

or

{
    "$schema": "[SECMAN_DIR]/resources/policies.schema.json",
    ...
}

Changelog

1.5.0

Fixed Security Issues

SECNEXT-258

Fix CVE-2022-25873

New Features

SECNEXT-175

Introduce default policy

SECNEXT-194

Show an info message if some changes are not applied due to missing "--delete" flag in secmanctl

SECNEXT-250

Show full service name (including folder) in policy editing dialog

SECNEXT-257

Allow configuration for different root URL for service info in Manager

SECNEXT-268

Prevent Manager app from startup when application.properties are not available

SECNEXT-273

Show effective permissions in groups view

Fixed Issues

SECNEXT-251

Role type not shown in Authorized Groups when for certain layers only one type exists

SECNEXT-271

ArcGIS Pro crashes on split when global IDs are used