Thursday, September 2, 2021
1 change · master
Security fixes and vulnerability patches
This fix strengthens protections around default signing roles so they cannot be removed through alternate screens or automated calls. It helps preserve required signing workflows and prevents accidental or unauthorized disruption of signature processes.
Original PR description
In task-2475732, security rules were added to protect the users from deleting default roles. However they did not take into account deleting the records from rpc calls or from other views. This PR fixes the rules so they also handle these cases and prevent the default roles to be deleted.