- ABP Framework version: v7.3.3
- UI Type: Blazor Server
- Database System: EF Core SQL Server
- Tiered (for MVC) or Auth Server Separated (for Angular): No not tiered
I am looking for some guidance on how to remove some functionality or at least disable it. Our web app is only used within our company and not accessible outside our Azure Tenant. Our application is going through a pen test with a 3rd party company, gearing up for approval on being launched. I want to remove as much un-needed functionality as I can to reduce attack surface for the pen testers. The application will be using authentication into our Azure Active Directory. In production i will have it turned off so the user cannot register, or login with a local account. Only external accounts using Azure Active Directory. Note that it isn't just about creating roles to hide things from the UI either as they will be pen testing with a Admin account along with other roles too.
- The application is NOT multi-tenant. But I do already have this disabled.
- I want to remove the Linked Accounts functionality. No need for this.
- Remove Authority Delegation.
- Disable UI Account management
- Remove Organization Units feature
- Hide basically all Settings UI.
I am guessing you are getting the point. Any guidance on how I can reduce this functionality of the things I have mentioned and if there is a common way I can do it if I missed anything, that would be great.
6 Answer(s)
-
0
hi
In this case, you'd better download the source code and disable them in the code.
-
0
There is no easier way to do that? I don't have access to all of the source code and I would hate to manage the custom code changes.
-
0
Currently there is no such design, you can only change the source code.
-
0
Of the things I listed. What are the modules I should focus on?
-
0
- Remove Authority Delegation.
- Disable UI Account management
- Remove Organization Units feature
- Hide basically all Settings UI.
These features exist on
Account.Promodule and setting-management module -
0
Thank you very much
