Project

General

Profile

Actions

Bug #6233

closed

Security issue - consultation seens by others

Added by Olivier Bitsch about 1 year ago. Updated about 1 year ago.

Status:
Rejected
Priority:
Urgent
Assignee:
Category:
-
Target version:
Start date:
11/21/2023
Due date:
% Done:

0%

Estimated time:

Description

We have security issue :

  • Admin can see websocket notification of consultation not sent by him and consultation not in his queue.
  • Admin can see on page refresh consultation not in his queue.
  • Doctor and Admin can see all opened consultations while he should see only him.

Doctor and Admin should have same behaviour.

Actions

Also available in: Atom PDF