#1103 closed defect (fixed)

Add permission check for downloading INCA report files

Reported by: Nicklas Nordborg Owned by: Nicklas Nordborg
Priority: critical Milestone: Reggie v4.21
Component: net.sf.basedb.reggie Keywords:
Cc:

Description

The INCA import and statistics wizards create a number of report files. They are currently accessible from the GUI via the wizards which require that the user has administrator or patient curator permissions. However, the actual download functionality is not checking the permissions which means that anyone that is logged in and has access to Reggie can manually type in the URL to download the report files.

Change History (1)

comment:1 Changed 20 months ago by Nicklas Nordborg

Resolution: fixed
Status: newclosed

(In [5252]) Fixes #1103: Add permission check for downloading INCA report files

Also simplified the file copying to use existing utility functions.

Note: See TracTickets for help on using tickets.