SORMAS-Foundation / SORMAS-Project

SORMAS (Surveillance, Outbreak Response Management and Analysis System) is an early warning and management system to fight the spread of infectious diseases.
https://sormas.org
GNU General Public License v3.0
293 stars 143 forks source link

Location.city field shows "Confidential" when is empty on LU servers #13171

Open sergiupacurariu opened 1 month ago

sergiupacurariu commented 1 month ago

Bug Description

On a Luxembourg server users are always able to see the city no matter if they have or not rights to see personal and sensitive data. On the Location.city field the user is able to see the city when there is one stored there but if the field in the database is empty then the Location.city field will show "Confidential" the same like any other field annotated with Personal or Sensitive

Reproduction Steps

  1. create 2 persons one that has recorded a city and one that does not have a city
  2. for the user role of the user you use for test - uncheck all the checkboxes in the data protection section
  3. check the person which has a city and see it is visible
  4. check the person for which no city has been selected and see that in the field "Confidential" will be visible ...

Expected Behavior

For the Location.city field which does not have stored any value in the database the system under above conditions should show an empty field.

Affected Area(s)

Web app

SORMAS Version

1.99.0 -SNAPSHOT

Android version/Browser

Chrome

User Role(s)

National user

Server URL

No response

Additional Information

No response