[SYNCOPE-1064] Improve security of customization mechanism

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.2
• Fix Version/s: 2.0.3, 2.1.0
• Component/s: enduser
• Assignee: Andrea Patricelli
• Reporter: Andrea Patricelli
• Created: 07/Apr/17 09:51
• Updated: 14/Apr/17 12:41
• Resolved: 12/Apr/17 10:16

Description

A smart and malicious user could "hack" angularjs frontend components and send info that is not allowed to create/edit.
Solve this by checking info on server side against form customization JSON.

Issue Links

• is related to: SYNCOPE-1009 Enduser must provide an easy way to enable/disable visualization and sorting of USER attributes