Uploaded image for project: 'OpenMRS Core'
  1. OpenMRS Core
  2. TRUNK-100

"Manage Users" visible to all users under Administration

    XMLWordPrintable

    Details

    • Complexity:
      Low

      Description

      On the Administration page, the Users section, including "Manage Users" is visible to all users no matter their privileges. If you click on it, it then prompts for a username / password. If the user doesn't have the privileges to see what's behind the link, they should not see the link either to simplify things. It requires the "Edit Users" privilege per the catalina log.

      WARN - RequireTag.doStartTag(109) |2010-05-12 10:14:08,599| The user: 'myuser' has attempted to access: /admin/users/user.list which requires privilege: Edit
       Users or one of: null or any of null
      

        Gliffy Diagrams

          Attachments

            Activity

              People

              Assignee:
              bwolfe Ben Wolfe
              Reporter:
              arbaughj James Arbaugh
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: