Uploaded image for project: 'OpenMRS Core'
  1. OpenMRS Core
  2. TRUNK-3711

Incorrect permissions on encounter role service methods

    XMLWordPrintable

    Details

      Description

      In the EncounterService, we incorrectly have the Manage Encounter Roles privilege on methods that should have View Encounter Roles privileges instead:

      @Authorized( { PrivilegeConstants.MANAGE_ENCOUNTER_ROLES })
      public List<EncounterRole> getAllEncounterRoles(boolean includeRetired);
      
      @Authorized( { PrivilegeConstants.MANAGE_ENCOUNTER_ROLES })
      public EncounterRole getEncounterRoleByUuid(String uuid) throws APIException;
      

        Gliffy Diagrams

          Attachments

            Activity

              People

              Assignee:
              lluismf Lluis Martinez
              Reporter:
              mseaton Mike Seaton
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 30 minutes
                  30m
                  Remaining:
                  Time Spent - 15 minutes Remaining Estimate - 15 minutes
                  15m
                  Logged:
                  Time Spent - 15 minutes Remaining Estimate - 15 minutes
                  15m