Granular permissions for managing Mana-KB preferences were added with bug 22198 but access to those system preferences via the standard preferences page was not locked down.. As such, we have a hole in the permissions logic here.
Can you detail? I do not get it.
Test plan 1) Add a new user with 'manage_sysprefs' permission. 2) Note that this user can change Mana related sytem preferences via `Home › Administration › System preferences > Web services > Mana KB` regardless of whether that also have the `manage_mana` permission or not. Note: This is actually the same case for HEA prefs too.
Do we really need this specific permission? I would go for removing manage_mana and use manage_sysprefs instead. Or, if we really need it, add a warning in the pref's description.