Skip to content

Bug: Rbac for notification, channels & permission group listing do not work as expected #2518

@kartik-579

Description

@kartik-579

📜 Description

Apis for - all notification listing, notification channels listing and permission group listing do not work as expected.

👟 Reproduction steps

  1. With view only access go to notifications, channel & permission group pages.

👍 Expected behavior

The users must not be able to view the responses. Api should return forbidden access.

👎 Actual Behavior

The users are not forbidded from the apis.

💻 Device

Desktop/Laptop

💻 Operating system

MacOS

🌍 Browser

Chrome

🧱 Your Environment

No response

✅ Proposed Solution

Update the rbacs

👀 Have you spent some time to check if this issue has been raised before?

  • I checked and didn't find any similar issue

🏢 Have you read the Code of Conduct?

AB#948

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions