Comment 25 for bug 1855080

Revision history for this message
Gage Hugo (gagehugo) wrote : Re: Credentials API allows listing and retrieving of all users credentials

I wasn't able to recreate this with Rocky, only a user with the "admin" role was able to list credentials, other users with member roles were denied (as policy defined).

The code was indeed changed after Rocky to account for system scope, where I believe that this issue was introduced.