Hi everyone,
We’ve just released ServiceControl 6.18.1.
Fixed bugs
- #5589 ServiceControl does not let clients know the enabled state of Role-Based Authorization
- #5590 User roles are not emitted to the authorization audit log
How to know if you are affected
You are affected by #5589 if authentication is enabled but authorization is disabled.
You are affected by #5590 if the authorization audit log is being ingested by a SIEM tool.
Symptoms
For #5589, the “Your Permissions” tab will show you as a user with permissions to all actions. While this is technically correct, the permissions tab should actually reflect that authorization is not enabled.
For #5590 the SIEM tools will not be able to facet the authorization entries based on user roles.
When to upgrade
You should upgrade immediately if you are affected. Otherwise, you should upgrade during your next maintenance window.
Where to get it
You can download the new version of ServiceControl from our website or Docker Hub.
Please read our support policy for more details.
With thanks,
The team in Particular