News for hackers. Stuff that matters.

A comment on Ask HN: Main things to consider when building an app for business/enterprise. Parent comment

Re:Ask HN: Main things to consider when building an app for ... by mooreds on Saturday January 07, 2023 @06:24PM (#34294146)
That's cool. FusionAuth has a self service function: https://fusionauth.io/docs/v1/tech/account-management/ but it is limited to user profile data, rather than roles and permissions.

How do you prevent a user from assigning themselves roles they shouldn't? Is there some kind of cage preventing escalation?

[ Parent | on HN ]
Re:Ask HN: Main things to consider when building an app for ... by akajla on Saturday January 07, 2023 @08:12PM (#34294946)
The self-service dashboard is scoped only to privileged users (typically account/tenant-specific admins like IT admins) that have a specific permission.
[ Parent | on HN ]