List of existing users is visible by any role

[ionutmocanita]

Hello,

Accounts are visible even if the role was restricted just to one Domain.
Is not secure. An Domain Administrator should see only the Assigned Domain user not all users and also analyst should not see all users (admins, other domains, etc).

[eric-intuitem]

We seek a good solution for this tough problem. The global admin can also be a normal user, and it is cumbersome to have several accounts per user (but possible). And should parent domain users be seen from child domains, and conversely?

We could manage visibility based on role assignments:

• Users assigned on a domain are visible only from users from the same domain or a parent domain.
• Exception (for advanced use-cases): if a user is assigned to a domain with "published" parameter, this user is visible from users assigned on subdomains.

With this simple logic, we could easily compute the list of visible users for any user and hopefully solve most cases.

[ab-smith]

Indeed, and technically this shouldn’t be an issue for the single tenant case of the community edition.
Filtering domains users is already on the Pro plan roadmap, as part of the advanced RBAC and should be available around Q2.

[ionutmocanita]

Hello the issue is not related to multi tenant.
Also in the single tenant, should not be visible in different domains.
Even if is community or pro.
It is a basic security issue.
I don't want to see people from different domains other ones

[ab-smith]

Hello,

I understand your point. As Eric mentioned the user object is at organisation level not at the domain, and both are linked with role assignment that is orthogonal.

My point is that seeing the users of your organisation is an intended feature for assignment management: both for setting the assignee or reading it, and seeing the users of your organisation is accordingly not a violation of any security principle: it's a pointer without any sensitive data leak.

That being said, that's the reason why I explained the relationship with multi tenancy management that we need to rework for pro and could benefit afterwards the CE.

Hope that makes it clearer :)