As a portal administrator I want to have fine-grained control of portal services available in templates

• Type: Story
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: None
• Fix Version/s: None
• Component/s: Application Security, Portal Services, Portal Services > Templates Engine
• Labels:
  • out-of-scope

LPS-58698 disabled dynamic access to services by default, all services were available for template editors, allowing them to gain administrator control.

For serviceLocator, utilLocator, objectUtil and staticUtil we need more fine-grained control of what is available for template editors, maybe based on Roles.