Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DEA] Restrict subject selection based on user sync configuration #1295

Open
Tracked by #1614
mahalakshme opened this issue Jul 25, 2024 · 0 comments
Open
Tracked by #1614

[DEA] Restrict subject selection based on user sync configuration #1295

mahalakshme opened this issue Jul 25, 2024 · 0 comments

Comments

@mahalakshme
Copy link
Contributor

mahalakshme commented Jul 25, 2024

As is:

  • Currently when filling value for subject concept in the form, we allow to select any subject from DEA, that might be outside of user's catchment as well.
  • In subject concept we only have access to the uuid of the subject
  • Via [Spike] Async execution of rules #1205, async execution of rules will get supported.
  • Via [DEA] User info access in rules #1250, details related to logged in user will be available in DEA.

AC:

  • So in the rules where subject selection is involved for the org in focus, fetch the subject and check if its sync attributes is one of the sync attributes(of the corresponding subject type of the subject) set on the user. If not show the error, say for inventory, 'Select the inventory for which user has access to.'
  • User should not be able to save the subject with the above error
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: In Analysis Review
Development

No branches or pull requests

1 participant