Uploaded image for project: 'OpenMRS Core'
  1. OpenMRS Core
  2. TRUNK-3711

Incorrect permissions on encounter role service methods

    XMLWordPrintable

Details

    Description

      In the EncounterService, we incorrectly have the Manage Encounter Roles privilege on methods that should have View Encounter Roles privileges instead:

      @Authorized( { PrivilegeConstants.MANAGE_ENCOUNTER_ROLES })
      public List<EncounterRole> getAllEncounterRoles(boolean includeRetired);
      
      @Authorized( { PrivilegeConstants.MANAGE_ENCOUNTER_ROLES })
      public EncounterRole getEncounterRoleByUuid(String uuid) throws APIException;
      

      Gliffy Diagrams

        Attachments

          Activity

            People

              lluismf Lluis Martinez
              mseaton Mike Seaton
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 30 minutes
                  30m
                  Remaining:
                  Time Spent - 15 minutes Remaining Estimate - 15 minutes
                  15m
                  Logged:
                  Time Spent - 15 minutes Remaining Estimate - 15 minutes
                  15m