📜 Description
Apis for - all notification listing, notification channels listing and permission group listing do not work as expected.
👟 Reproduction steps
- With view only access go to notifications, channel & permission group pages.
👍 Expected behavior
The users must not be able to view the responses. Api should return forbidden access.
👎 Actual Behavior
The users are not forbidded from the apis.
💻 Device
Desktop/Laptop
💻 Operating system
MacOS
🌍 Browser
Chrome
🧱 Your Environment
No response
✅ Proposed Solution
Update the rbacs
👀 Have you spent some time to check if this issue has been raised before?
🏢 Have you read the Code of Conduct?
AB#948