Restrict site admin remote stop transaction
Can stop transactions on sites where he is SA
Stop only his transactions on other sites
MODIFY
src/authorization/AuthorizationsDefinition.ts
src/authorization/AuthorizationsDefinition.ts
@@ -1719,8 +1719,17 @@ export const AUTHORIZATION_DEFINITION: AuthorizationDefinition = {
},
},
{
- resource: Entity.CONNECTOR,
- action: [Action.REMOTE_STOP_TRANSACTION, Action.REMOTE_START_TRANSACTION],
+ resource: Entity.CONNECTOR, action: [Action.REMOTE_STOP_TRANSACTION],
+ condition: {
+ Fn: 'custom:dynamicAuthorizations',
+ args: {
+ asserts: [],
+ filters: ['SitesAdminUsers']
+ }
+ },
+ },
+ {
+ resource: Entity.CONNECTOR, action: [Action.REMOTE_START_TRANSACTION],
condition: {
Fn: 'custom:dynamicAuthorizations',
args: {

Restrict site admin remote stop transaction (#3752)

- Can stop transactions on sites where he is SA
- Stop only his transactions on other sites