DUP-Admin -> FAQ page can be accessed by non system admin users
Opened this issue · 5 comments
manuji commented
Parent ticket: #325
Scenario:
- Navigate to the DUP-Admin on TEST environment: https://d3jkh5unv9de6y.cloudfront.net/dayuse/
- Login as a non system admin user
- Check if you can access the FAQ page from the following methods.
- From Home page
- From left navigation panel
- From the direct link to the page: https://d3jkh5unv9de6y.cloudfront.net/dayuse/faq
Expected:
- Only system admin users should be able to access the FAQ page.
Issue:
- The FAQ page can be accessed by nonsystem admin users from the direct link
- For non-system admin users, the link to navigate to the FQA page is displayed and through that link the page is accessible.
Screen.Recording.2024-01-25.at.5.49.44.PM.mov
Note to QA: There are several non-admin users.
manuji commented
Tested on TEST: Pending
- Verified that the FAQ page on the Admin system is only accessible by the "sysAdmin" role.
- But the link to FAQ page is displayed on both Left nav and the Home page for the non-subsAdmin users.
@JLWade & @ndelraye, shouldn't we hide the links if they are not relevant to the logged-in user? Please let us know your thoughts.
JLWade commented
suggest moving back to to-do to resolve :)
manuji commented
@Christopher-walsh22 , assigning this back to you to update the navigation panel and the Home page cards.
manuji commented
Tested on TEST: Passed
- Verified that this issue has been fixed.
- Pending deployment to PROD