CAUCA-9-1-1 / survip

SURVI-Prevention Desktop
2 stars 3 forks source link

A user can see FireStations of SSI that he does not have access #435

Closed Zalverick closed 5 years ago

Zalverick commented 5 years ago

Describe the bug When I logged in with "admin" after having synchronized the data that was pending for synch in "geobase", I had quite a few more FireStations that are part of CAUCA SSI.

My user does not have access to that SSI, hence when I opened the details of the FireStation, Instead of seeing the name of the SSI in the appropriate field, I saw a GUID.

To Reproduce Steps to reproduce the behavior:

  1. In the dev env., login with a user that does not have access to CAUCA SSI.
  2. Go in the "Gestion SSI" section then in FireStation
  3. Click "Edit" on "Caserne 1"
  4. You will see a GUID in the SSI field. Expected behavior I should see the FireStations in the list only for the SSI for which I have access.