Uploaded image for project: 'OpenMRS Core'
  1. OpenMRS Core
  2. TRUNK-4496

Saving an order should not require sql level access privilege

    Details

    • Complexity:
      Low

      Description

      When saving an order, the code in the OrderserviceImpl makes a call to AdministrationService.executeSQL(..), this means the authenticated is required to have the SQL Level Access privilege which is wrong.

      The proposed solution is to have a DAO method to be called and get rid of the call to executeSQL

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                rohanpoddar Rohan Poddar
                Reporter:
                wyclif Wyclif Luyima
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 6 hours
                  6h
                  Remaining:
                  Time Spent - 2 hours Remaining Estimate - 4 hours
                  4h
                  Logged:
                  Time Spent - 2 hours Remaining Estimate - 4 hours
                  2h