Opened 6 years ago
Closed 6 years ago
#1103 closed defect (fixed)
Add permission check for downloading INCA report files
| Reported by: | Nicklas Nordborg | Owned by: | Nicklas Nordborg |
|---|---|---|---|
| Priority: | critical | Milestone: | Reggie v4.21 |
| Component: | net.sf.basedb.reggie | Keywords: | |
| Cc: |
Description
The INCA import and statistics wizards create a number of report files. They are currently accessible from the GUI via the wizards which require that the user has administrator or patient curator permissions. However, the actual download functionality is not checking the permissions which means that anyone that is logged in and has access to Reggie can manually type in the URL to download the report files.
Note:
See TracTickets
for help on using tickets.
(In [5252]) Fixes #1103: Add permission check for downloading INCA report files
Also simplified the file copying to use existing utility functions.