restricted config parameter available for normal users

[yuri]

Likely, the config model data is not erased on logout. I'll look into. Not a big deal from the security point of view though.

[papermoon]

Not sure what you think about it, I just found it out by mistake. But I will mention it anyway. EspoCRM 9.1.7

I defined a new config parameter with level admin in config.json

{
  "params": {
    "blablabla": {
      "level": "admin"
    }
  }
}

I will skip the rest of the configuration, basically this works fine. So as Administrator I can define my parameter value. Now when I login as normal user, this parameter is not available in this.getConfig().attributes.blablabla. But when I login as Administrator, then log out and in the same tab login as normal user again, the parameter is still available.

Andre