Some REST Api methods still allow Loan Officer to get access to accounts from 
different branches 
-------------------------------------------------------------------------------------------------

                 Key: MIFOS-5355
                 URL: http://mifosforge.jira.com/browse/MIFOS-5355
             Project: mifos
          Issue Type: Bug
    Affects Versions: Release 2.2.2
            Reporter: Lukasz Chudy
            Priority: Major
             Fix For: Release H


This issue is related to MIFOS-5340.

The following REST methods still don't have enough validation and still allow 
Loan Officer to get access to accounts from different branches:
- getAccountTransactionHistoryByNumber
- getClientChargesByNumber
- getGroupChargesByNumber
- getCenterChargesByNumber
- getCollectionSheet
- saveCollectionSheet



--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
http://mifosforge.jira.com/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
_______________________________________________
Mifos-issues mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mifos-issues

Reply via email to