Skip to content

Commit

Permalink
Merge branch 'docs/cleanup-4.8' of https://github.com/Evolveum/midpoint
Browse files Browse the repository at this point in the history
… into docs/cleanup-4.8
  • Loading branch information
matusmacik committed Feb 26, 2024
2 parents f52639e + 735ab54 commit 9f64fa0
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 5 deletions.
6 changes: 3 additions & 3 deletions docs/expressions/expressions/profiles/configuration.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -395,7 +395,7 @@ Yet another dangerous thing is a dynamic invocation based on Java Reflection fra
This may even be tightly integrated into some scripting languages.
Therefore be very careful and analyse the situation properly.
Do not rely on default configuration that comes with midPoint.
This configuration is xref:/midpoint/reference/security/security-guide/[not meant to be completely secure].
This configuration is xref:/midpoint/security/security-guide/[not meant to be completely secure].
The setup may vary in various environments, some scripts need to be less powerful, some must be more powerful, some environments are more tolerant to risk and would prefer more flexibility while other environments will heavily constrain flexibility to eliminate the risk.
One size does not fit all.

Expand Down Expand Up @@ -462,6 +462,6 @@ See xref:/midpoint/features/planned/expression-profiles/[Expression Profiles: Fu

* xref:/midpoint/reference/expressions/expressions/profiles/[Expression Profiles]

* xref:/midpoint/reference/security/security-guide/[Security Guide]
* xref:/midpoint/security/security-guide/[Security Guide]

* xref:/midpoint/features/planned/expression-profiles/[Expression Profiles: Full Implementation]
* xref:/midpoint/features/planned/expression-profiles/[Expression Profiles: Full Implementation]
4 changes: 2 additions & 2 deletions docs/expressions/expressions/profiles/index.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ But for some purposes they may be just too powerful.
Expressions, and especially xref:/midpoint/reference/expressions/expressions/script/[scripting expressions], can do anything.
This can be abused by a malevolent attacker to gain unauthorized access to data, disable the system or do almost any kind of damage.
This is the very nature of customization based on scripting.
Even though the dangers are quite obvious and self-explanatory, we have xref:/midpoint/reference/security/security-guide/[warned] the users about this all the time.
Even though the dangers are quite obvious and self-explanatory, we have xref:/midpoint/security/security-guide/[warned] the users about this all the time.
The recommendation was not to allow any untrusted user to set up any expression.

However, there is a limit to such an recommendation.
Expand Down Expand Up @@ -91,4 +91,4 @@ Please see xref:/midpoint/features/planned/expression-profiles/[Expression Profi

* xref:/midpoint/reference/expressions/[Mappings and Expressions]

* xref:/midpoint/reference/security/security-guide/[Security Guide]
* xref:/midpoint/security/security-guide/[Security Guide]

0 comments on commit 9f64fa0

Please sign in to comment.