project
project copied to clipboard
Implement settlement API security with privileges
Implement privilege verification at the API level, to prevent the issues described below:
Scenario
- Login with user account that is not being assigned to any particular role
- Go to settlement menu
Result
- User can access all the data on Settlement menu which include Model, Batches, Matrices, Transfer.
- He can also perform any actions like creating settlement model, creating matrix, settle and so on.
Actions that can be done on settlement menu without assigning related privileges
- View_Settlement_Model
- Create_New_Settlement_Model
- Filtering_Batches
- View_Batches
- Create_Static_Matrix
- Create_Dynamic_Matrix
- View_All_Matrix
- View_Matrix_Details
- Close_Matrix
- Lock_Matrix
- Unlock_Matrix
- Settle_Matrix
- Dispute_Matrix
- View_All_Transfer
Renamed to "Implement settlement API security with privileges"
@hsuyeemon-tw , I can see you are assigned to this ticket. Are you working on it?
@JulieG19 I have requested the review before merging my changes for this ticket. Thanks.