Uploaded image for project: 'stripes-smart-components'
  1. stripes-smart-components
  2. STSMACOM-480

User cannot see what user last updated record without user permissions

    XMLWordPrintable

Details

    • ACQ Sprint 107
    • 1
    • Thunderjet

    Description

      Overview: Users who aren't able to view the users app cannot see what user last updated a record. Instead the source reads "Automated process"

      Steps to reproduce:
      Login to folio-snapshot
      Create a user with all order permissions
      Create an order record
      Logout and login with new user that only has order permissions
      View the order just created
      Expand the "Record last updated" accordion

      Expected: Record last updated source displays the user name of the user that last updated the order

      Actual: Source displays as "Automated process". Even after you edit the record yourself.

      Note: this may be a broader problem with significant implications for privacy and security. Potentially the users app could include a specific permission that makes this possible without allowing users to browse user records.

      Interested parties: kgambrell

      TestRail: Results

        Attachments

          Issue Links

            Activity

              People

                dennisbridges Dennis Bridges
                dennisbridges Dennis Bridges
                Dennis Bridges Dennis Bridges
                Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  TestRail: Runs

                    TestRail: Cases