certat / do-portal

This project is in maintenance mode and will only receive bug fixes, but no new features. A new version of this software is being developed.
5 stars 5 forks source link

Error if not allowed to view parent organization's details #18

Closed ghost closed 6 years ago

ghost commented 6 years ago

Scenario: A non-admin user calls https://cp-aec-stg.cert.at/#!/organizations/<id> for it's own organization. There is a parent organization and the user has no right to view it.

As the page requests information about the parent organization to display the "Parent Organization Abbreviation", this causes a 403 error.

Proposal @certrik we could allow the user to view only the name for the parent organization, so the user does not see an error, and only the needed information.

ghost commented 6 years ago

duplicate of #16