marthaegrimaldi / marthaegrimaldi/food-ordering-application-using-react-native
Enatega Admin Dashboard : Unauthorized Data Display on Admin Dashboard to new user logged-in.
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 1
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
Describe the bug
The admin dashboard displays data that is not relevant to the user's position, allowing users to view information they should not have access to. For example if a vendor logs-in to admin dashboard he should only be allowed to see the data relevant to his position not overall or un-necessary information.
To Reproduce
Steps to reproduce the behavior:
Go to 'Enatega Admin Dashboard'
Login as new user for example as new Vendor.
See error , now see admin dashboard displays data that is not relevant to the user's position, allowing users to view information they should not have access to.
Expected behavior
The dashboard should display only the data that is relevant to the logged-in user's role or position.
Users should not see data that belongs to other roles or departments.
Screenshots
Image Image
Desktop (please complete the following information):
OS: [e.g. Windows]
Browser [e.g. Chrome]
Version [e.g. Latest]
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the Enatega Admin Dashboard entry point and reproduce the issue by logging in as a new Vendor. Trace which dashboard data is shown for that role and compare it with the expected role-specific visibility. Done means a vendor sees only data relevant to that role and no data belonging to other roles.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- authorization, frontend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100