OHDSI / OHDSI/WebAPI

If a user has WRITE permission to an object, they should see this object in the list

Open
#2,322 3 comments 0 reactions 1 assignee View on GitHub

@chrisknoll is already working on this.

Since Nov 21, 2023.

security
Dominant language
Java
Stars
151
Forks
183
Avg merge
14m
Merged PRs (30d)
2

Description

Expected behavior

A user with WRITE permission only should see the object in the list of objects of this type (i.e. WRITE permission should be like READ+WRITE)

Actual behavior

The user with WRITE permission but without READ permission can access the object via a direct link, but does not see this object in the list (e.g. cohort characterization analysis in the list of cohort characterizations)

Steps to reproduce behavior
  1. user1 creates an object (concept set, cohort definition, characterization, pathways, incidence rates, PLE or PLP)
  2. user1 grants WRITE permission to the object to user2, but does not grant READ permission
  3. user2 opens a list of objects of this type

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.