Closed rfdougherty closed 11 years ago
The search page currently allows anyone to find out if a named person has been scanned in studies to which they have no access. We need to modify the search query to filter on access >anon-read whenever subject name is part of the query.
The search page currently allows anyone to find out if a named person has been scanned in studies to which they have no access. We need to modify the search query to filter on access >anon-read whenever subject name is part of the query.