SORMAS (Surveillance, Outbreak Response Management and Analysis System) is an early warning and management system to fight the spread of infectious diseases.
On a Luxembourg server users are always able to see the city no matter if they have or not rights to see personal and sensitive data. On the Location.city field the user is able to see the city when there is one stored there but if the field in the database is empty then the Location.city field will show "Confidential" the same like any other field annotated with Personal or Sensitive
Reproduction Steps
create 2 persons one that has recorded a city and one that does not have a city
for the user role of the user you use for test - uncheck all the checkboxes in the data protection section
check the person which has a city and see it is visible
check the person for which no city has been selected and see that in the field "Confidential" will be visible
...
Expected Behavior
For the Location.city field which does not have stored any value in the database the system under above conditions should show an empty field.
Bug Description
On a Luxembourg server users are always able to see the city no matter if they have or not rights to see personal and sensitive data. On the Location.city field the user is able to see the city when there is one stored there but if the field in the database is empty then the Location.city field will show "Confidential" the same like any other field annotated with Personal or Sensitive
Reproduction Steps
Expected Behavior
For the Location.city field which does not have stored any value in the database the system under above conditions should show an empty field.
Affected Area(s)
Web app
SORMAS Version
1.99.0 -SNAPSHOT
Android version/Browser
Chrome
User Role(s)
National user
Server URL
No response
Additional Information
No response