bcgov / bcgov/entity

Businesses Identifier is being exposed to the account that is not authorized to view it..

Open
#30,370 1 comment 0 reactions 0 assignees View on GitHub
bug Entities Team Priority3
Dominant language
JavaScript
Stars
23
Forks
62
Avg merge
24m
Merged PRs (30d)
1

Description

**Describe the bug in the current situation**
If a temp ID is turned into a Business ID, and the user swaps the new temp ID created with a different account back with the old one, the Business Dashboard ends up showing the Business ID to an unrelated account

Steps to reproduce the behavior:
1. Go to 'https://test.bcregistry.gov.bc.ca/en-CA'
2. Log in with BCREGA001
3. Create a New IA, note down its temp identifier, and complete the filing(In this case, temp identifier >> businesses)
4. Now, log in with a different account, start an IA, and replace the temp identifier with that of an old one created on the different account.
5. Notice that the BRD page with the Retrieve Business button shows up..
6. When clicking on the button in the URL displays the Business Identifier.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.