Details
-
Story
-
Status: Open
-
Minor
-
Resolution: Unresolved
-
None
-
None
Description
LPS-58698 disabled dynamic access to services by default, all services were available for template editors, allowing them to gain administrator control.
For serviceLocator, utilLocator, objectUtil and staticUtil we need more fine-grained control of what is available for template editors, maybe based on Roles.