sanvinaik opened a new pull request, #6799:
URL: https://github.com/apache/fineract/pull/6799

   ## Description
   
   This PR addresses FINERACT-2982 by enforcing office-hierarchy access 
restrictions for capitalized income operations on progressive loans.
   
   Previously, capitalized income operations did not consistently validate 
whether the requesting user had access to the loan's office hierarchy.
   
   ## Changes
   
   - Replaced loanAssembler.assembleFrom(loanId) with 
loanAssembler.assembleFromInUserScope(loanId) in addCapitalizedIncome().
   
   - Applied the same user-scope validation in capitalizedIncomeAdjustment().
   
   - Added an integration test covering both capitalized income addition and 
adjustment.
   
   - Verified that users belonging to sibling offices receive HTTP 403, while 
users belonging to the loan's office can successfully perform both operations.
   
   ## Checklist
   
   Please make sure these boxes are checked before submitting your pull request 
- thanks!
   
   - [x] Write the commit message as per [our 
guidelines](https://github.com/apache/fineract/blob/develop/CONTRIBUTING.md#pull-requests)
   - [x] Acknowledge that we will not review PRs that are not passing the build 
_("green")_ - it is your responsibility to get a proposed PR to pass the build, 
not primarily the project's maintainers.
   - [x] Create/update [unit or integration 
tests](https://fineract.apache.org/docs/current/#_testing) for verifying the 
changes made.
   - [x] Follow our [coding 
conventions](https://cwiki.apache.org/confluence/display/FINERACT/Coding+Conventions).
   - [x] Add required Swagger annotation and update API documentation at 
fineract-provider/src/main/resources/static/legacy-docs/apiLive.htm with 
details of any API changes
   - [x] [This PR must not be a "code 
dump"](https://cwiki.apache.org/confluence/display/FINERACT/Pull+Request+Size+Limit).
 Large changes can be made in a branch, with assistance. Ask for help on the 
[developer mailing list](https://fineract.apache.org/#contribute).
   - [x] If merging this PR resolves a JIRA issue, I will mark that issue as 
resolved and set "Fix Version/s" appropriately.
   - [x] I followed the [AI 
Policy](https://github.com/apache/fineract/blob/develop/CONTRIBUTING.md#ai-policy).
   
   Your assigned reviewer(s) will follow our [guidelines for code 
reviews](https://cwiki.apache.org/confluence/display/FINERACT/Code+Review+Guide).
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to