BUG-000127906 for ArcGIS Online

漏洞 ID 编号	BUG-000127906
已提交	January 13, 2020
上次修改时间	June 5, 2024
适用范围	ArcGIS Online
找到的版本	7.4
操作系统	Windows OS
操作系统版本	N/A
状态	Will Not Be Addressed

附加信息

This behavior is expected and will not be changed. The reason it is not possible to edit a custom role which is set as a new member default because it is not allowed to set the default administrator role or a custom role with administrative privileges as a new member default. If email invites to create accounts with administrative privileges were sent to the wrong person (or intercepted in any way) then it could lead to security vulnerabilities for that organization. If a custom role set in new member defaults is allowed to be edited, then it could allow the admin to add administrative privileges to the role. Because new member defaults directly impact newly added members, we have to block all avenues that could lead to sending invitations which include roles with administrative privileges.