User: switch to service user

Plugin ID: eca_switch_service_account

Available since: 2.1.3

Switch to the globally configured service account. Everything after this action runs with the permissions of that account, not with those of the user who triggered the model. ECA does not check any permission before the switch, because elevating from a low privileged trigger to the service account is the very purpose of this action, so restricting it is part of the model: make sure the triggering event and the conditions in front of this action cannot be reached by an account that should not be able to cause the switch, and grant the service account only the permissions that your models actually need.

Fields

<em>Restricting this action is part of the model.</em> Everything after it runs with the permissions of the account being switched to, not with those of the user who triggered the model. ECA does not check any permission before the switch, because switching is the very purpose of this action. Make sure that the triggering event and the conditions in front of this action cannot be reached by an account that should not be able to cause the switch, for example by adding a role or permission condition before it, and grant the account being switched to only the permissions that the model actually needs.