[TT-13760] Set default value to true for forbidAdminViewAccessToken a…

…nd forbidAdminResetAccessToken fields. (#394)
TykTechnologies · Feb 28, 2025 · e9c4006 · e9c4006
1 parent 0fca9b5
commit e9c4006
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 7 deletions.
diff --git a/components/tyk-dashboard/values.yaml b/components/tyk-dashboard/values.yaml
@@ -286,10 +286,10 @@ dashboard:
   enableMultiOrgUsers: true 
   # This is a security feature that allows you to prevent the admin user from viewing the access token of a user.
   # It is used to set TYK_DB_SECURITY_FORBIDADMINVIEWACCESSTOKEN  
-  forbidAdminViewAccessToken: false
+  forbidAdminViewAccessToken: true
   # This is a security feature that allows you to prevent the admin user from resetting the access token of a user.
   # It is used to set TYK_DB_SECURITY_FORBIDADMINRESETACCESSTOKEN  
-  forbidAdminResetAccessToken: false
+  forbidAdminResetAccessToken: true
   # Configuration for Audit logs
   auditLogs:
     # Enables audit logging.

diff --git a/tyk-control-plane/values.yaml b/tyk-control-plane/values.yaml
@@ -1221,12 +1221,12 @@ tyk-dashboard:
     # It is used to set TYK_DB_ENABLEMULTIORGUSERS
     enableMultiOrgUsers: true
     # This is a security feature that allows you to prevent the admin user from viewing the access token of a user.
-    # The default is false.
+    # The default is true.
     # It is used to set TYK_DB_SECURITY_FORBIDADMINVIEWACCESSTOKEN
-    forbidAdminViewAccessToken: false
+    forbidAdminViewAccessToken: true
     # This is a security feature that allows you to prevent the admin user from resetting the access token of a user.
     # It is used to set TYK_DB_SECURITY_FORBIDADMINRESETACCESSTOKEN
-    forbidAdminResetAccessToken: false
+    forbidAdminResetAccessToken: true
     # Configuration for Audit logs
     auditLogs:
       # Enables audit logging.

diff --git a/tyk-stack/values.yaml b/tyk-stack/values.yaml
@@ -1235,10 +1235,10 @@ tyk-dashboard:
     enableMultiOrgUsers: true
     # This is a security feature that allows you to prevent the admin user from viewing the access token of a user.
     # It is used to set TYK_DB_SECURITY_FORBIDADMINVIEWACCESSTOKEN
-    forbidAdminViewAccessToken: false
+    forbidAdminViewAccessToken: true
     # This is a security feature that allows you to prevent the admin user from resetting the access token of a user.
     # It is used to set TYK_DB_SECURITY_FORBIDADMINRESETACCESSTOKEN
-    forbidAdminResetAccessToken: false
+    forbidAdminResetAccessToken: true
     # Configuration for Audit logs
     auditLogs:
       # Enables audit logging.