Release Notes 1.5
What’s New
Introduction of Fallback Policies
With a fallback policy you can now define a policy for all users to whom no explicit policy is assigned. So you can now define extended access permissions to a certain group, while you can assign basic permissions for "everybody else".
Support for alternative ArcGIS Server URLs in Manager UI Configuration
For the Manager UI, you need to configure the ArcGIS Server URL(s) used with security.manager NEXT during the installation. In some setups, it is necessary to configure the direct server URL (port 6443). If you still want to use the Web Adaptor URL in the service status information in the Service Manager, you can now configure an alternative URL to be used there.
Display of Effective Permissions in the Groups View of Policy Explorer
In the groups view, so far only permissions were displayed that were directly assigned to the selected group.
However, there can be other policies which are effective for this group, such as those for enhancedSecurity_any
or enhancedSecurity_authenticated
.
Now all these permissions are displayed to avoid misinterpretations.
Update Notes
If you skip several versions during the update, please also follow all update notes of the intervening versions. |
Policy JSON Schema Update
If you edit policies in a JSON editor with the help of the policy JSON schema, and you want to make use of the new policy features, the schema needs to be updated.
To do so, please update the URL to https://raw.githubusercontent.com/conterra/policies-json/1.5.0/schema/policies.schema.json
, or use the schema provided in folder [SECMAN_DIR]/resources/policies.schema.json
of the security.manager NEXT distribution.
Policies should begin with
{
"$schema": "https://raw.githubusercontent.com/conterra/policies-json/1.5.0/schema/policies.schema.json",
...
}
or
{
"$schema": "[SECMAN_DIR]/resources/policies.schema.json",
...
}
Changelog
1.5.0
New Features
|
Introduce default policy |
|
Show an info message if some changes are not applied due to missing "--delete" flag in secmanctl |
|
Show full service name (including folder) in policy editing dialog |
|
Allow configuration for different root URL for service info in Manager |
|
Prevent Manager app from startup when application.properties are not available |
|
Show effective permissions in groups view |