marthaegrimaldi / marthaegrimaldi/zomato-clone-source-code

Enatega Admin Dashboard : Unauthorized Data Display on Admin Dashboard to new user logged-in.

Open
#1,011 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
1
Forks
2
PR merge metrics
No merged PRs in 30d

Description

Describe the bug
The admin dashboard displays data that is not relevant to the user's position, allowing users to view information they should not have access to. For example if a vendor logs-in to admin dashboard he should only be allowed to see the data relevant to his position not overall or un-necessary information.

To Reproduce
Steps to reproduce the behavior:

Go to 'Enatega Admin Dashboard'
Login as new user for example as new Vendor.
See error , now see admin dashboard displays data that is not relevant to the user's position, allowing users to view information they should not have access to.
Expected behavior
The dashboard should display only the data that is relevant to the logged-in user's role or position.
Users should not see data that belongs to other roles or departments.

Screenshots

Image Image
Desktop (please complete the following information):

OS: [e.g. Windows]
Browser [e.g. Chrome]
Version [e.g. Latest]

Contributor guide

Open the contributing guide

Research direction

Start at the Enatega Admin Dashboard and reproduce the issue by logging in as a new Vendor, then trace which dashboard data is loaded and how the logged-in role is applied. Done means a vendor sees only vendor-relevant data and users in other roles cannot see data outside their permissions; verify this across the affected dashboard views.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
authorization
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.