GeriLife / GeriLife/wellbeing-client
Non-admin user should not be able to access settings section
Open
bug
good first issue
help wanted
- Dominant language
- Vue
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
The setting section is currently accessible to non-admin users. However, they can't change any settings or view any sensitive data. In any case, they should not be able to access the settings section.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the settings-section entry point and its access check, then reproduce access as a non-admin user. Done means non-admin users are blocked from the settings section while admins retain access; add a regression test if the project has coverage for this behavior.
Written by the indexing model from the issue text.
Assessment
- Domain
- authorization, frontend
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100