-
Type:
Bug
-
Resolution: Done
-
Priority:
High
-
Affects Version/s: None
-
None
The Nurse and Counselling Officer roles are displaying identical module access in the
application. Both roles can access and perform actions on the same set of modules, which
violates the Role-Based Access Control (RBAC) rules defined in the PRD.
Steps to Reproduce:
1. Log in as NURSE role.
2. Observe all accessible modules and screens.
3. Note down the list of modules visible and accessible.
4. Log out.
5. Log in as COUNSELLING OFFICER role.
6. Observe all accessible modules and screens.
7. Compare both role access lists.
Expected Result (As per PRD Section 1.2):
NURSE should have access to:
- General Examination
- TB Screening
- General OPD
- Diagnostics Screen
NURSE should NOT have access to:
- Confirmed TB Cases (write)
- Counselling module
- Admin panel
COUNSELLING OFFICER should have access to:
- Confirmed TB Cases
- Counselling module
- TPT / Household Contact Line Listing
- Read access: Confirmed TB case data, Line list
COUNSELLING OFFICER should NOT have access to:
- Registration module (write)
- Nurse modules (write)
Actual Result:
- Nurse role and Counselling Officer role are showing the same modules and screens.
- Both roles can access modules that should be restricted to the other role only.
- No role separation is enforced in the current build.