Uploaded image for project: 'PhenoTips'
  1. PT-3745

Pedigree does not check delete rights when offering to delete a patient record

    Details

    • Type: Bug
    • Status: Paused
    • Priority: Medium
    • Resolution: Unresolved
    • Affects Version/s: 1.4-milestone-4
    • Fix Version/s: 1.5
    • Component/s: Pedigree
    • Labels:
      None
    • Sprint:

      Description

      When un-linking a patient record from a pedigree node the dialog that pops up now has a "delete patient record" button (note: in a non-prominent position)

      When selected and approved, the delete request is made, and there is no check that the user has the right to delete the patient. This right can be different from the edit right (on some custom instances with custom authorisation module implementations), so the delete right should be explicitly checked per-patient

        Attachments

          Activity

            People

            • Assignee:
              asm Andriy Misyura
              Reporter:
              asm Andriy Misyura
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: