bcgov / bcgov/entity

BUSINESS DASHBOARD - affiliation check is by user not account

Open
#32,627 15 comments 0 reactions 3 assignees Claimed by @forgeuxGH5 View on GitHub
bug Entities Team Pay
Dominant language
JavaScript
Stars
23
Forks
62
Avg merge
24m
Merged PRs (30d)
1

Description

Travis noticed this issue while planning our affiliation changes.

The scenario happens for people who are members of multiple accounts.

Scenario:
1. Log in with credential that is a member of multiple accounts
2. Using one of the accounts, create an affiliation with a business
3. Navigate to the business dashboard for that company
4. In the top-right, select another account (one that doesn't have an affiliation)
5. Result - the account you selected is still able to remain on the dashboard and may be able to make changes to the business.

Can someone from entities please confirm whether there are downstream checks that would prevent this person from downloading PDFs, or making filings/changes to the business?

### Requirements
WHEN I log in to an account A
AND I access the Business Registry Dashboard for account A
AND I access the Entity Dashboard for an entity affiliated to account A
OR I just stay in Business Registry Dashboard for account A
AND THEN I select another account/org_id B
THEN my current session is closed
AND I am presented with the products selection page for the new account B

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.