You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The blocked/disabled user or the user without permissions is able to access the Users app when attempting to view store login details from the Facilities app.
Expected behavior
The user should be restricted from accessing the Users app and should receive an appropriate error message or be redirected to a page indicating they do not have access.
Steps to reproduce the issue
Ensure that the user is blocked/disabled or does not have permission to access the Users app.
Log in with this user account.
Navigate to the Facilities app.
Attempt to view the details of store logins from within the Facilities app and observe the issue.
Environment details
App version : v1.10.2
App environment : UAT
The text was updated successfully, but these errors were encountered:
Adameddy26
changed the title
Blocked/disabled user or user without permissions can access Users app via Facilities app when viewing store login details
[Security Breach]Blocked/disabled user or user without permissions can access Users app via Facilities app when viewing store login details
Aug 28, 2024
Current behavior
The blocked/disabled user or the user without permissions is able to access the Users app when attempting to view store login details from the Facilities app.
Expected behavior
The user should be restricted from accessing the Users app and should receive an appropriate error message or be redirected to a page indicating they do not have access.
Steps to reproduce the issue
Ensure that the user is blocked/disabled or does not have permission to access the Users app.
Log in with this user account.
Navigate to the Facilities app.
Attempt to view the details of store logins from within the Facilities app and observe the issue.
Environment details
App version : v1.10.2
App environment : UAT
The text was updated successfully, but these errors were encountered: