Role-Based Access Control broken — Nurse and Counselling Officer have identical module access

XMLWordPrintable

    • Type: Bug
    • Resolution: Done
    • Priority: High
    • 1.1
    • Affects Version/s: None
    • None

      The Nurse and Counselling Officer roles are displaying identical module access in the 
      application. Both roles can access and perform actions on the same set of modules, which 
      violates the Role-Based Access Control (RBAC) rules defined in the PRD. 

      Steps to Reproduce:

      1. Log in as NURSE role.
      2. Observe all accessible modules and screens.
      3. Note down the list of modules visible and accessible.
      4. Log out.
      5. Log in as COUNSELLING OFFICER role.
      6. Observe all accessible modules and screens.
      7. Compare both role access lists.

      Expected Result (As per PRD Section 1.2):

      NURSE should have access to:

      • General Examination 
      • TB Screening 
      • General OPD
      • Diagnostics Screen

      NURSE should NOT have access to:

      • Confirmed TB Cases (write) 
      • Counselling module 
      • Admin panel 

      COUNSELLING OFFICER should have access to:

      • Confirmed TB Cases 
      • Counselling module 
      • TPT / Household Contact Line Listing 
      • Read access: Confirmed TB case data, Line list

      COUNSELLING OFFICER should NOT have access to:

      • Registration module (write) 
      • Nurse modules (write) 

      Actual Result:

      • Nurse role and Counselling Officer role are showing the same modules and screens.
      • Both roles can access modules that should be restricted to the other role only.
      • No role separation is enforced in the current build.

       

              Assignee:
              Nidhi Saini
              Reporter:
              Nidhi Saini
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: