User with only one right cannot access 'View Orders' page.

Description

MW-383:
When missing POD_MANAGE or ORDERS_VIEW right, user was not able to open View Orders page.
It was possible only if user had two rights despite the fact that only one of those two is required.

Check that:

  • user with POD_MANAGE only has access

  • user with ORDERS_VIEW only has access

  • user with both has access

  • user without any doesn't have access

Environment

None

Activity

Show:
Joanna Bebak
July 31, 2017, 1:10 PM

I tested the ticket, and users with suitable roles can access the "View Orders" page, and those who shouldn't, can't. I noticed two issues:

1. The changelog concerning the ticket is missing.

2. Users with the Warehouse Clerk role can't see the "Manage PODs" option after clicking on "Orders" in the top menu, only the "View Orders" option is visible. It should not be so, as they have both rights: POD_MANAGE and ORDERS_VIEW. In contrast, Delivery Approvers with only the POD_MANAGE right can see both options in the menu - "View Orders" and "Manage PODs". The issue might be related to the ticket.

Weronika Ciecierska
August 4, 2017, 10:35 AM
Edited


1. changelog was added by .

2. In order to see "Manage PODs" in navigation user needs two rights: REQUISITION_CREATE and PODS_MANAGE, not POD_MANAGE and ORDERS_VIEW. So if user doesn't have both rights, he cannot see it. Does that answer your question?

Joanna Bebak
August 7, 2017, 7:58 AM

I didn't know that, thanks. Now everything's clear. I made a re-test, and everything works correctly.

Done

Assignee

Mateusz Kwiatkowski

Reporter

Mateusz Kwiatkowski

Labels

Story Points

1

Time tracking

0m

Time remaining

4h

Sprint

None

Fix versions

Priority

Major