Skip to content

Bug: Restrict entity listing based on role permissions #3147

@wambui-pixel

Description

@wambui-pixel

What were you trying to achieve?

Limit entity listing based on role permissions.

What are the expected results?

Entity listing should be restricted based on role permissions.

What are the received results?

A user is able to list the channels.
For example, Ava is a domain admin and she invites JaneDoe with domain_member role. When I list the channels, groups and clients using Jane Doe's token, I can see those created by Ava.

Image Image Image

Steps To Reproduce

  1. Create a domain role with any channel permission.
  2. Invite a user .
  3. Accept invitation and list the entities in the domain using the invitee's token.

In what environment did you encounter the issue?

Main

Additional information you deem important

No response

Metadata

Metadata

Assignees

Labels

Type

Projects

Status

🚧 In Progress

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions