Temp_MSSPLASHPage/permission_report.md

Permission and Endpoint Report

This report details the permissions defined in the application and the controllers and methods that use them.

Defined Permissions

The following permissions are defined in src/SplashPage.Core/Authorization/PermissionNames.cs:

• Pages.Tenants
• Pages.Users
• Pages.Users.Activation
• Pages.Roles
• Pages.CP
• Pages.Integrations
• Pages.Administration.NetworkGroups
• Pages.Administration.NetworkGroups.Create
• Pages.Administration.NetworkGroups.Edit
• Pages.Administration.NetworkGroups.Delete

Endpoint Authorization

Controllers with Specific Permissions

Controller	Permission	File

Controllers Requiring General Authentication

These controllers require a user to be logged in but do not require a specific permission.

Controller	File

Controllers Allowing Anonymous Access

These controllers can be accessed without authentication.

Controller	File
ScanningAPIController (Host)	src/SplashPage.Web.Host/Controllers/ScanningAPIController.cs
SplashPageController (Host)	src/SplashPage.Web.Host/Controllers/SplashPageController.cs

Controllers with No Explicit Authorization

These controllers do not have any explicit authorization attributes. Access may be determined by other factors.

Controller	File
DiagnosticController	src/SplashPage.Web.Host/Controllers/DiagnosticController.cs
AntiForgeryController	src/SplashPage.Web.Host/Controllers/AntiForgeryController.cs
HomeController (Host)	src/SplashPage.Web.Host/Controllers/HomeController.cs