User can select Team from Program they are not part of as 'Requesting Team' in Dependency creation

XMLWordPrintable

      Issue Summary

      The user was able to select the Team from the Program they are not part of as the 'Requesting Team' and successfully created a Dependency.
      I can understand this behavior is expected for the "Depends on" team field but for the "Requesting Team" field, this should not be possible.

      This is reproducible on Data Center: yes

      Steps to Reproduce

      1. Inpersonate the user account that only has access to the particular Program
      2. Create a new dependency and select the Team from a different Program in the "Requesting Team" field
      3. Save it.

      Expected Results

      User cannot view or select a Team from a Progam they are not part of

      Actual Results

      User can view and select a Team from a Progam they are not part of and can successfully create Dependency.

      Workaround

      Currently, there is no known workaround for this behavior. A workaround will be added here when available

            Assignee:
            Bhanu Vanjaku
            Reporter:
            Joe Win
            Votes:
            1 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: