Replying to Avatar armstrys

I’m in instance like this it would be great if the client could explicitly not allow the nsecBunker to vice more permissions than it needs. Otherwise users are an accidental button click away from giving more permissions that would ever be needed!
Avatar
PABLOF7z 2y ago

Yeah, that’s exactly what I’m saying:

You could authorize zapplepay to ONLY sign zap requests

All other signatures, encryption, decryption are rejected.

Reply to this note

Please Login to reply.

Discussion

Avatar
armstrys 2y ago

And the admin panel wouldn’t even show an approve all kinds event?

Doesn’t it normally allow you to approve a single kind or everything? Or does that everything request have to be defined by the client request?

Avatar
PABLOF7z 2y ago

Right now it does but you’ll be able to say “never” for other events 👍