Details
-
Bug
-
Status: Closed
-
Non-Essential
-
Resolution: Fixed
-
None
-
None
-
Low
Description
I just tried to view a concept in my dictionary as the Anonymous user, and I get back an exception:
org.openmrs.api.APIAuthenticationException
Privileges required: View Forms
My Anonymous role only has the privilege View Concepts assigned to it, but since the concept viewing page (e.g. dictionary/concept.htm) shows which forms the concept is included on, it is checking the View Forms privilege as well.
The ConceptFormController should only try to fetch the forms if the user has the right privileges.
The Concept.form page will only display the forms section if there are any forms in the model sent by the ConceptFOrmController.