View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0008499 | Taler | libeufin-bank | public | 2024-02-22 21:53 | 2024-03-07 19:49 |
| Reporter | Florian Dold | Assigned To | sebasjm | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Target Version | 0.9.4 | Fixed in Version | 0.9.4 | ||
| Summary | 0008499: bank UI allows admin to cash-out for users, but backend forbids it | ||||
| Description | Not sure which component is wrong, the UI or the backend. Should the admin be able to start cash-outs on behalf of other accounts? | ||||
| Tags | No tags attached. | ||||
| The backend doesn't allow the administrator to perform bank transactions or cashouts for another user, but I can easily change that. | |
| I'm not sure we should! I think the main thing is that the GUI needs to allow normal users to cash-out. | |
| I think it does allow cash-outs for normal users, it was just so well hidden in the UI that I did not find them ;-) | |
| Is this now a duplicate of 0008498? Well, I guess NOT allowing the admin (in the UI) to do cash-out for other users is then this bug, right? (In the backend, my understanding is that it is already forbidden.) | |
| i'm not sure if I understood this correctly. I'm removing the link "cashouts" in the account list in the admin home page. This remove the access for the admin to the user cashout. Previously, this was a place to look for the list of cashouts of the user (and it worked) now I see that backend forbids it. (if my memory works ok) | |
| please check that the change is what you expected | |
| LGTM now. | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2024-02-22 21:53 | Florian Dold | New Issue | |
| 2024-02-22 21:53 | Florian Dold | Status | new => assigned |
| 2024-02-22 21:53 | Florian Dold | Assigned To | => Antoine A |
| 2024-02-24 17:17 | Antoine A | Note Added: 0021486 | |
| 2024-02-25 17:46 | Christian Grothoff | Note Added: 0021492 | |
| 2024-02-25 17:58 | Antoine A | Assigned To | Antoine A => sebasjm |
| 2024-02-25 18:07 | Florian Dold | Note Added: 0021500 | |
| 2024-02-25 18:24 | Christian Grothoff | Note Added: 0021502 | |
| 2024-02-25 18:24 | Christian Grothoff | Note Edited: 0021502 | |
| 2024-02-27 12:19 | sebasjm | Note Added: 0021533 | |
| 2024-02-27 12:19 | sebasjm | Assigned To | sebasjm => Florian Dold |
| 2024-02-27 12:19 | sebasjm | Status | assigned => feedback |
| 2024-02-27 12:19 | sebasjm | Note Added: 0021534 | |
| 2024-03-01 11:11 | Florian Dold | Assigned To | Florian Dold => sebasjm |
| 2024-03-01 11:11 | Florian Dold | Status | feedback => informing |
| 2024-03-01 11:11 | Florian Dold | Resolution | open => fixed |
| 2024-03-01 11:11 | Florian Dold | Fixed in Version | => 0.9.4 |
| 2024-03-01 11:11 | Florian Dold | Note Added: 0021599 | |
| 2024-03-07 19:49 | Christian Grothoff | Status | informing => closed |