InSpire MMC user with "InSpire Index Writer" role is able to update Configuration (MINDBREEZE15601)

ID: MINDBREEZE15601 
Affected Components: Mindbreeze InSpire G7, Mindbreeze InSpire SaaS 
Severity: 6.2 Medium 
Status: Final 
First published: February 2, 2021 

Summary

Privileged Role "InSpire Index Writer" is able to perform configuration posts that the index writer does not have access. 

Remediation

Hotfix Information

Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS:

• Mindbreeze InSpire 20.5 Release (Version 20.5.1.835)
• Mindbreeze InSpire SaaS 20.5 Release (Version 20.5.1.835)