diff --git a/configuration/application-permissions.html b/configuration/application-permissions.html index c700300..cb09e4d 100644 --- a/configuration/application-permissions.html +++ b/configuration/application-permissions.html @@ -82,7 +82,7 @@ called "implicit permissions" it used to determine whether an applicat

If no permission was explicitly attached to the application, it was considered fully trusted and was granted all the permissions. Similarly, if you granted the "token endpoint" permission to an application but NO "grant type" permission, it was assumed the client application was allowed to use the password or client credentials grants.

-

Retrospectively, this logic was too complex and it removed in RC3 and application permissions MUST now be explicitly granted.

+

Retrospectively, this logic was too complex and was removed in RC3: application permissions MUST now be explicitly granted.

Endpoint permissions

Definition

diff --git a/manifest.json b/manifest.json index e73ae92..bba0ec5 100644 --- a/manifest.json +++ b/manifest.json @@ -9,7 +9,7 @@ "output": { ".html": { "relative_path": "configuration/application-permissions.html", - "hash": "LOmSHldwDeJLrrKM8vU/xA==" + "hash": "y78P3+7bCwRlnNtXWh2z6g==" } }, "is_incremental": false,