Replicate the configuration change in #018d6ba to identity.xml
<Permissions>/permission/admin/manage/identity/cors/origins/view</Permissions>
<Scopes>internal_cors_origins_view</Scopes>
</Resource>
-
+ <Resource context="(.*)/api/server/v1/configs" secured="true" http-method="GET">
+ <Permissions>none</Permissions>
+ <Scopes>internal_login</Scopes>
+ </Resource>
<Resource context="(.*)/api/users/v1/(.*)" secured="true" http-method="all">
<Permissions>/permission/admin/manage/identity</Permissions>
<Scopes>internal_identity_mgt_view</Scopes>
