dhis2-devs team mailing list archive

[Lars Helge Øverland <larshelge@xxxxxxxxx>]

Public bug reported:

When doing a search in the org unit web tree, e.g. in data entry or org
unit module, you can search and open org units which are outside the
sub-tree(s) of the current user. This should not be permitted.

** Affects: dhis2
     Importance: High
     Assignee: Morten Olav Hansen (mortenoh)
         Status: New

** Changed in: dhis2
    Milestone: None => 2.13

** Changed in: dhis2
   Importance: Undecided => High

** Changed in: dhis2
     Assignee: (unassigned) => Morten Olav Hansen (mortenoh)

-- 
You received this bug notification because you are a member of DHIS 2
developers, which is subscribed to DHIS.
https://bugs.launchpad.net/bugs/1227063

Title:
  Org unit tree search not respecting access control

Status in DHIS 2:
  New

Bug description:
  When doing a search in the org unit web tree, e.g. in data entry or
  org unit module, you can search and open org units which are outside
  the sub-tree(s) of the current user. This should not be permitted.

To manage notifications about this bug go to:
https://bugs.launchpad.net/dhis2/+bug/1227063/+subscriptions