unicef / etools-partner-reporting-portal

Other
5 stars 11 forks source link

IMO can edit projects which are not in IMO's cluster or plan #813

Open KKaselkar opened 6 years ago

KKaselkar commented 6 years ago
  1. Create 2 IMO Users
  2. Create 2 Clusters
  3. Associate Cluster 1 to IMO 1, and Cluster 2 to IMO 2.
  4. Log-in as IMO 1 and create Project 1. Note that in the Clusters dropdown, you can only select Cluster 1.
  5. Log-in as IMO 2 and create Project 2. Note that in the Clusters dropdown, you can only select Cluster 2.
  6. In the list of Projects, you will see both Projects 1 and 2. You will also be able to edit both Projects.

IMO 1 should only be able to edit Project 1, and IMO 2 should only be able to edit Project 2.

sethgold8 commented 5 years ago

@KKaselkar I only see Projects that belong to to theI IMO the cluster belongs in (hence the ability to edit). Can you reproduce, give steps and share with screenshot.

sethgold8 commented 5 years ago

@KKaselkar I only see Projects that belong to to theI IMO the cluster belongs in (hence the ability to edit). Can you reproduce, give steps and share with screenshot.