Issue Summary

To improve the instance's security posture, application directory permissions should be as limited as possible. As a part of this change, the following warning is displayed on the Crowd admin UI. Since many customers map the user directory to the crowd-administrator group for external applications as a requirement. This warning was implemented as a VULN mitigation.

However, there must be a toggle or link to disable the warning that creates panic for customers.

Insecure application directory permissions detected

The following applications have write permissions to directories mapped to Crowd administrators. As a result requests from these applications could cause changes to members of Crowd administrator groups. In order to increase your instance's security posture application directory permissions should be as limited as possible. Remove the "Update Group" permission to prevent undesired updates to your Crowd administrators. Learn more

confluence
Example Company Crowd server

Expected Results

Dismissing the warning should be either granted on an app-dir-mapping basis or on the basis of the current state, so that if the state changes, we can show the warning again