Bug 395 - User from one branch can create users and roles for other branch members in the Roles module
Summary: User from one branch can create users and roles for other branch members in t...
Status: OPEN
Alias: None
Product: Smartwas
Classification: Unclassified
Component: Exploratory Testing Bugs (show other bugs)
Version: unspecified
Hardware: PC Windows
: High High
Assignee: Hemanth (Hemanth)
URL:
Depends on:
Blocks:
 
Reported: 2026-08-13 12:39 UTC by Raghul (Raghul)
Modified: 2026-08-14 06:17 UTC (History)
1 user (show)

See Also:
Associated Test Case ID:
Triaged By: ---
Root Cause Analysis (RCA):
Resolution Summary / Fix Details:
Impact Area:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Raghul (Raghul) 2026-08-13 12:39:49 UTC
A user logged in with a specific branch account (e.g., Bangalore B1 Raghul) is able to create users and roles for members of other branches. The Select Branches dropdown displays external branch names (e.g., Chennai, DEL-MR, HYD-P, MUMBAI-01), allowing cross-branch role assignment. Branch-restricted users should only be able to view and manage roles within their own assigned branch.