ordercloud-api/headstart

Bug - Inadvertent Supplier access to RMAs

abishop451 opened this issue · 1 comments

Steps to Reproduce

  1. As a Buyer, submit an order with items from two different suppliers
  2. As each supplier, create a shipment for all the items
  3. As a Buyer, request a return for items from two different suppliers -- you'll see each time as "Return Requested"
  4. As one of the Suppliers, view the original order. Here you can see two RMAs on the order (one for Supplier 1 and one for Supplier 2). The issue is that when you click into the RMA that is not for your Supplier, you get an error.

Expected Result - As a supplier, only show the RMA link that contains my supplier items to me on the original order

Note: As a Supplier, when I view RMAs from the RMA list page, I do correctly only see the RMAs that contain my products

This view likely has something to do with showing all RMAs on an order for the MPO, so keep that in mind that the MPO should continue to see all RMAs tied to an order.

This is fixed