-
Notifications
You must be signed in to change notification settings - Fork 673
Open
Labels
Description
What were you trying to achieve?
Limit entity listing based on role permissions.
What are the expected results?
Entity listing should be restricted based on role permissions.
What are the received results?
A user is able to list the channels.
For example, Ava is a domain admin and she invites JaneDoe with domain_member role. When I list the channels, groups and clients using Jane Doe's token, I can see those created by Ava.
Steps To Reproduce
- Create a domain role with any channel permission.
- Invite a user .
- Accept invitation and list the entities in the domain using the invitee's token.
In what environment did you encounter the issue?
Main
Additional information you deem important
No response
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
🚧 In Progress