Pega Sales Automation for Insurance modified rules for BAC prevention
In release 8.3, Pega Sales Automation for Insurance has modified the rules that invoke secured activities in Pega Platform. The query strings and parameters in the calls are registered so that they cannot be tampered by the end-users.
For more information about the enhancements to prevent Broken Access Control (BAC), and to see a list of rules that were modified for all Pega Sales Automation applications, see Pega Sales Automation modified rules for BAC prevention.
Attached at the bottom of the article are all modified rules for Pega Sales Automation for Insurance 8.5. If you have overridden any of these rules in your Pega Sales Automation implementation layer, you need to update them with the changed rules.
The following list shows the modified rules for Pega Sales Automation for Insurance 8.3. If you have overridden any of these rules in your Pega Sales Automation for Insurance implementation layer, you need to update them with the changed rules.
| Rule | Rule name | Class name | Available | Ruleset version |
|---|---|---|---|---|---|
1 | Rule-HTML-Section | crmSubmitAndCancel | PegaInsCrm-Work-SFA-Policy | Yes | PegaIns-CRM-08-03-01 |
2 | Rule-HTML-Section | crmSubmitAndCancel | PegaInsCrm-Work-SFA-Quote | Yes | PegaIns-SFA-08-03-01 |
3 | Rule-HTML-Section | crmSubmitAndCancel | PegaInsCrm-Work-SFA-Opportunity | Yes | PegaIns-SFA-08-03-01 |
4 | Rule-HTML-Section | ViewOppWithoutQuote | PegaInsCrm-Work-SFA-Opportunity | Yes | PegaIns-SFA-08-03-01 |
5 | Rule-HTML-Section | ViewQuotesByProductsAndStatus | PegaInsCrm-Work-SFA-Quote | Yes | PegaIns-CRM-08-03-01 |
6 | Rule-HTML-Section | QuoteCountWidgetDetails | PegaInsCrm-Work-SFA-Quote | Yes | PegaIns-SFA-08-03-01 |
7 | Rule-HTML-Section | ShowPolicies | PegaInsCrm-Work-Account | Yes | PegaIns-CRM-08-03-01 |
8 | Rule-HTML-Section | ShowPolicies | PegaInsCrm-Work-Account-Ind | Yes | PegaIns-CRM-08-03-01 |
9 | Rule-Navigation | crmRelatedPolicies_Navigation | PegaInsCrm-Work-Account-Ind | Yes | PegaIns-CRM-08-03-01 |
10 | Rule-Navigation | crmWorkMenu | PegaInsCrm-Work-SFA-Policy | Yes | PegaIns-CRM-08-03-01 |
11 | Rule-Navigation | crmWorkMenu | PegaInsCrm-Work-Account-Ind | Yes | PegaIns-CRM-08-03-01 |
12 | Rule-Navigation | crmRelatedOpps_Navigation_Acc | PegaInsCrm-Work-Account | Yes | PegaIns-CRM-08-03-01 |
13 | Rule-Navigation | crmRelatedOpps_Navigation | PegaInsCrm-Work- | Yes | PegaIns-CRM-08-03-01 |
14 | Rule-Navigation | QuoteMenu | PegaInsCrm-Work-SFA-Quote | Yes | PegaIns-SFA-08-03-01 |
15 | Rule-Navigation | OppMenu | PegaInsCrm-Work-SFA-Opportunity | Yes | PegaIns-SFA-08-03-01 |
Previous topic Pega Sales Automation for Insurance Next topic Deprecated and withdrawn rules and table changes in Pega Sales Automation for Insurance