Actions
Bug #4872
closedView Invoice: The invoice document is visible to a member who should not have access, as they do not belong to the appropriate group.
Start date:
06/23/2025
Due date:
% Done:
0%
Estimated time:
Description
Scenario:
- Client A is associated with two groups: Group A and Group B
- Group A has one member: Member A
- Group B has one member: Member B
Steps to Reproduce:
1. Log in to Lauditor using Member A's account.
2. Navigate to the Invoice section and click on the Create tab.
3. Select Client A, complete the required details and click Save.
4. Log out.
5. Log in using Member B's account.
6. Navigate to the Invoice section and click on the View tab.
Expected Result:
The invoice created for Client A should not be visible to Member B, since Member B does not belong to the same group as the creator.
Actual Result:
The invoice is visible to Member B.
Link - https://drive.google.com/file/d/1PrGqJ9GcCCvhntq5cjo8fTgIN-ZFEA5I/view?usp=drive_link
Updated by Vengadeshwaran R about 2 months ago
- Assignee changed from Soundarya Vembaiyan to muskan mathur
Updated by Boomibalagan Ravichandran 14 days ago
- Status changed from New to Resolved
- Assignee changed from muskan mathur to Vengadeshwaran R
Actions