Capacity: user without access can view and edit capacity when navigating via Program Room

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: High
    • 11.6.0
    • Affects Version/s: 11.3.1, 11.4.1
    • Component/s: Capacity

      Issue Summary

      A user without access role to view or edit the Capacity can navigate to the page via Program Room, and alter it.
      See the below gif with the reproduction of the scenario:

      Steps to Reproduce

      1. Remove the access of a role for the Capacity page
      2. With a user with this role, go to the Program Room
      3. Scroll down and click on Capacity
      4. Now you can view and edit the capacity, without the access to do it.

      Expected Results

      Users without access to the Capacity should not be able to view or edit it.

      Actual Results

      Users without access to the Capacity can view and edit it when navigating via Program Room.

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

            Assignee:
            Bhanu Vanjaku
            Reporter:
            Diego Larangeira
            Votes:
            2 Vote for this issue
            Watchers:
            10 Start watching this issue

              Created:
              Updated:
              Resolved: