[TT-13760] Set default value to true for forbidAdminViewAccessToken and forbidAdminResetAccessToken fields. (#394)

Author: buraksezer

components/tyk-dashboard/values.yaml

@@ -286,10 +286,10 @@ dashboard:
   enableMultiOrgUsers: true 
   # This is a security feature that allows you to prevent the admin user from viewing the access token of a user.
   # It is used to set TYK_DB_SECURITY_FORBIDADMINVIEWACCESSTOKEN  
-  forbidAdminViewAccessToken: false
+  forbidAdminViewAccessToken: true
   # This is a security feature that allows you to prevent the admin user from resetting the access token of a user.
   # It is used to set TYK_DB_SECURITY_FORBIDADMINRESETACCESSTOKEN  
-  forbidAdminResetAccessToken: false
+  forbidAdminResetAccessToken: true
   # Configuration for Audit logs
   auditLogs:
     # Enables audit logging.

tyk-control-plane/values.yaml

@@ -1221,12 +1221,12 @@ tyk-dashboard:
     # It is used to set TYK_DB_ENABLEMULTIORGUSERS
     enableMultiOrgUsers: true
     # This is a security feature that allows you to prevent the admin user from viewing the access token of a user.
-    # The default is false.
+    # The default is true.
     # It is used to set TYK_DB_SECURITY_FORBIDADMINVIEWACCESSTOKEN
-    forbidAdminViewAccessToken: false
+    forbidAdminViewAccessToken: true
     # This is a security feature that allows you to prevent the admin user from resetting the access token of a user.
     # It is used to set TYK_DB_SECURITY_FORBIDADMINRESETACCESSTOKEN
-    forbidAdminResetAccessToken: false
+    forbidAdminResetAccessToken: true
     # Configuration for Audit logs
     auditLogs:
       # Enables audit logging.

tyk-stack/values.yaml

@@ -1235,10 +1235,10 @@ tyk-dashboard:
     enableMultiOrgUsers: true
     # This is a security feature that allows you to prevent the admin user from viewing the access token of a user.
     # It is used to set TYK_DB_SECURITY_FORBIDADMINVIEWACCESSTOKEN
-    forbidAdminViewAccessToken: false
+    forbidAdminViewAccessToken: true
     # This is a security feature that allows you to prevent the admin user from resetting the access token of a user.
     # It is used to set TYK_DB_SECURITY_FORBIDADMINRESETACCESSTOKEN
-    forbidAdminResetAccessToken: false
+    forbidAdminResetAccessToken: true
     # Configuration for Audit logs
     auditLogs:
       # Enables audit logging.