BCStudentSoftwareDevTeam / BCStudentSoftwareDevTeam/celts

Editing Personal Information to Admins and Profile Owners

Open
#1,783 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
1
Forks
15
Avg merge
5d 39m
Merged PRs (30d)
8

Description

Issue Description: When navigating through Student Search → Student Profile → Edit Personal Information, Program Managers and Operations Team members are currently able to edit another student's personal information.

Program Managers and Operations Team members should not have permission to modify a student's personal information. Only CELTS Admins and the current user viewing their own profile should be able to make these changes.

Expected Behavior: Only a CELTS Admin or the student whose profile is being viewed can access and edit that student's personal information. Program Managers and Operations Team members should not be able to edit another user's personal information from the student profile.

UI:
Image

Contributor guide

No contributing guide indexed for this repository

Research direction

Trace the Student Search → Student Profile → Edit Personal Information flow and inspect the permission checks controlling access to that edit action. Confirm that CELTS Admins and students viewing their own profiles can edit, while Program Managers and Operations Team members cannot edit another student's information; verify each role in the UI.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authorization
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.