Details
-
Task
-
Resolution: Fixed
-
L3 - Default
-
None
-
None
-
None
Description
We need to make sure that the backend endpoint implemented in OPT-6670 is only accessible to users with proper permission. Therefore we need to couple the viewing of the dashboard with the permission for a user to see the process this dashboard belongs to. All users with permission to the process definition should also be able to see the instant preview dashboard for that process
Testing notes
- Testing needs to be done in conjunction with
OPT-6671 - When testing, the user that is logged shall be able to see the instant preview dashboard and the reports being displayed correctly if he/she has access to the underlying process definition
- Happy case: User has access to process definition and can therefore see the dashboard and the reports
- Forbidden case: User has no access to a process definition and tries to access an instant preview dashboard for that process -> No data shall be displayed