Uploaded image for project: 'stripes-smart-components'
  1. stripes-smart-components
  2. STSMACOM-480

User cannot see what user last updated record without user permissions

    XMLWordPrintable

    Details

    • Template:
      Standard Bug Write-Up Format
    • Sprint:
      ACQ Sprint 107
    • Story Points:
      1
    • Development Team:
      Thunderjet

      Description

      Overview: Users who aren't able to view the users app cannot see what user last updated a record. Instead the source reads "Automated process"

      Steps to reproduce:
      Login to folio-snapshot
      Create a user with all order permissions
      Create an order record
      Logout and login with new user that only has order permissions
      View the order just created
      Expand the "Record last updated" accordion

      Expected: Record last updated source displays the user name of the user that last updated the order

      Actual: Source displays as "Automated process". Even after you edit the record yourself.

      Note: this may be a broader problem with significant implications for privacy and security. Potentially the users app could include a specific permission that makes this possible without allowing users to browse user records.

      Interested parties: Khalilah Gambrell

        TestRail: Results

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                dennisbridges Dennis Bridges
                Reporter:
                dennisbridges Dennis Bridges
                Tester Assignee:
                Dennis Bridges Dennis Bridges
                Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved:

                    TestRail: Runs

                      TestRail: Cases