BUSINESS DASHBOARD - affiliation check is by user not account
- Dominant language
- JavaScript
- Stars
- 23
- Forks
- 62
- Avg merge
- 24m
- Merged PRs (30d)
- 1
Description
Travis noticed this issue while planning our affiliation changes.
The scenario happens for people who are members of multiple accounts.
Scenario:
1. Log in with credential that is a member of multiple accounts
2. Using one of the accounts, create an affiliation with a business
3. Navigate to the business dashboard for that company
4. In the top-right, select another account (one that doesn't have an affiliation)
5. Result - the account you selected is still able to remain on the dashboard and may be able to make changes to the business.
Can someone from entities please confirm whether there are downstream checks that would prevent this person from downloading PDFs, or making filings/changes to the business?
### Requirements
WHEN I log in to an account A
AND I access the Business Registry Dashboard for account A
AND I access the Entity Dashboard for an entity affiliated to account A
OR I just stay in Business Registry Dashboard for account A
AND THEN I select another account/org_id B
THEN my current session is closed
AND I am presented with the products selection page for the new account B
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.