[Bug]: Employee balance visible for users with indirect read Detailed Employee Ledger Entry
Nobody has claimed this yet.
- Dominant language
- AL
- Stars
- 683
- Forks
- 459
- Avg merge
- 3d 26m
- Merged PRs (30d)
- 633
Description
Describe the issue
I suggest add the AccessByPermission = tabledata "Detailed Vendor Ledg. Entry" =R; for balance fields on employee table.
Expected behavior
For users with indirect read Detailed Employee Ledger Entry the balance field on employee card is not visible
Steps to reproduce
User have the indirect read Detailed Employee Ledger Entry.
Open employee card
The Balance field is visible
Additional context
No response
I will provide a fix for a bug
- I will provide a fix for a bug
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the Employee table and employee card entry points, then inspect how balance fields and access to Detailed Employee Ledger Entry are defined. Reproduce the case with indirect read permission and verify that the balance field is not visible while users with the required access retain the expected behavior.
Written by the indexing model from the issue text.
Assessment
- Domain
- authorization
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 62/100