Uploaded image for project: 'OpenMRS Core'
  1. OpenMRS Core
  2. TRUNK-100

"Manage Users" visible to all users under Administration

    XMLWordPrintable

    Details

    • Complexity:
      Low

      Description

      On the Administration page, the Users section, including "Manage Users" is visible to all users no matter their privileges. If you click on it, it then prompts for a username / password. If the user doesn't have the privileges to see what's behind the link, they should not see the link either to simplify things. It requires the "Edit Users" privilege per the catalina log.

      WARN - RequireTag.doStartTag(109) |2010-05-12 10:14:08,599| The user: 'myuser' has attempted to access: /admin/users/user.list which requires privilege: Edit
       Users or one of: null or any of null
      

        Attachments

          Activity

            People

            Assignee:
            bwolfe Ben Wolfe
            Reporter:
            arbaughj James Arbaugh [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: