Uploaded image for project: 'COmanage'
  1. COmanage
  2. CO-2767

CoPetitions index view permissions not correct for approver group

    XMLWordPrintable

Details

    Description

      If a user is a member of a CO Group that is used as the approvers group for a configured enrollment flow, and the user is asked to browse to a URL like

      /registry/co_petitions/index/search.status:PA/search.enrollmentFlow:307/co:7 

      and the user has no other privileges that would allow the index view for that controller (is not a CO admin or COU admin), then the user is not allowed to view the index.

      The user can view individual petitions, but not the index view.

      It would be helpful if the user could view the index view so that the user/approver could just bookmark the URL and not have to rely on email notifications.

      Attachments

        Issue Links

          Activity

            People

              arlen.johnson@at.internet2.edu Arlen Johnson
              scott.koranda@at.internet2.edu Scott Koranda
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: