Uploaded image for project: 'OpenMRS Core'
  1. OpenMRS Core
  2. TRUNK-3711

Incorrect permissions on encounter role service methods

    XMLWordPrintable

    Details

    • Complexity:
      Low

      Description

      In the EncounterService, we incorrectly have the Manage Encounter Roles privilege on methods that should have View Encounter Roles privileges instead:

      @Authorized( { PrivilegeConstants.MANAGE_ENCOUNTER_ROLES })
      public List<EncounterRole> getAllEncounterRoles(boolean includeRetired);
      
      @Authorized( { PrivilegeConstants.MANAGE_ENCOUNTER_ROLES })
      public EncounterRole getEncounterRoleByUuid(String uuid) throws APIException;
      

        Gliffy Diagrams

          Attachments

            Activity

              People

              Assignee:
              lluismf Lluis Martinez
              Reporter:
              mseaton Mike Seaton
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 30 minutes
                  30m
                  Remaining:
                  Time Spent - 15 minutes Remaining Estimate - 15 minutes
                  15m
                  Logged:
                  Time Spent - 15 minutes Remaining Estimate - 15 minutes
                  15m