Bug ID 1186333: SSL permissions nullify RBAC restrictions

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IQ ADC(all modules)

Known Affected Versions:
8.2.0, 8.2.0.1

Opened: Nov 05, 2022

Severity: 3-Major

Symptoms

All SSL certificates are listed when the application service role is added along with the SSL permission role.

Impact

Some objects are presented that the user does not have permission to see.

Conditions

Create SSL resource group with permission for a few objects, application service role. Assign User with both the above mentioned roles.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips