-
Suggestion
-
Resolution: Unresolved
-
None
-
None
The Centralized License Visibility plugin's endpoints for checking calculation status and fetching calculation results require Application Links authentication. This means that any automation or auditing tools which want to request license data calculation need to use Application Links to actually obtain the results. However such an application link will cause the healthcheck to fail unless it has valid outgoing authentication configured and pointing to a server which can be reached by the instance.
If those endpoints were accessible by a highly privileged user, automation could then use that user's account to operate on calculation results.