Ivy permissions and system permission

Michael Knight — Tue, 21 Jun 2016 17:37:18 -0400

Is it safe to set all rights to granted in the Ivy Admin console for the role "Everybody"

For example a user has the "UserAddRole" permission. If the webapp doesn't has the feature to add a role is it still somehow possible for the user to add a role?

In other words: As long as the webapp controls the security itself, does it need the ivy security layer?

Questions Tagged With security

Ivy permissions and system permission