Bug #12618
[BIF-45141] Can create user for other Participant from Participant User Maker
Status: | User Acceptance Test | Start date: | November 23, 2021 | ||
---|---|---|---|---|---|
Priority: | Normal | Due date: | November 23, 2021 | ||
Assignee: | Siti Norahayu Mohd Desa | % Done: | 90% | ||
Category: | - | Spent time: | - | ||
Target version: | - |
Description
Performed using URL:
https://bifastportalnft.corp.bi.go.id/bifast-portal-non/common/Login.do
During preparation of Scenario #2, we created many user using script from the browser. We accidentally created a CENAIDJA user using BSMDIDJA.
We try to reproduce it, and it can be done using minimal script attached.
1. logged in wih a BSMDIDJA user (normal create user screen)
2. copy+paste the script to browser console ( problem_portal_script.js )
3. the result, is a Bank Niaga user. Although the username started with "null_", the user behaves just like a Bank Niaga user (can see the data, can change, etc)
History
#1 Updated by Ngoh Chee Ping almost 3 years ago
- Status changed from New - Begin Life Cycle to Internal Testing
- Assignee changed from Ngoh Chee Ping to Siti Norahayu Mohd Desa
- % Done changed from 0 to 100
Fixed by add extra checking to check the selected bic is same with login user bic code. This will deploy today by bram.
#2 Updated by Nurul Akmal almost 3 years ago
- Status changed from Internal Testing to User Acceptance Test
- % Done changed from 100 to 90
Send for user retest.