search

nus-cs2103-AY2324S2 / pe-dev-response

0 stars 0 forks source link

No user logged in, yet able to see address book #2059

Open nus-se-script opened 7 months ago

nus-se-script commented 7 months ago

Upon initial launch of the application, there is no user logged in. Yet we are already able to see pre-existing address books. This is leakage of user data.

Steps to reproduce:

  1. Ensure no ./data folder in the folder you're launching the .jar.
  2. Run the jar.

image.png

[original: nus-cs2103-AY2324S2/pe-interim#2617] [original labels: type.FunctionalityBug severity.High]

ChuaZenKhoon commented 7 months ago

Team's Response

This is sample data. There are no situations that allow user addressbook data to be shown.

It is also mentioned in our UG that this is the observed when starting up the application. There is no different or unintended behaviour.

Hence, we are rejecting this bug, and assigning it a lower severity.

image.png

Duplicate status (if any):

--