Skip to content

Commit

Permalink
Allow system role full access for processing
Browse files Browse the repository at this point in the history
When I removed access from the system role in
83f2cbc, we didn't understand how
pervasive the PSM used the system role for internal processing. The
first visible problem was that the post-processing of a submitted
enrollment application failed, as the post-processing code no longer had
permission to read or modify the application, but this was not the only
problem.

We will continue to change internal processing code to no longer require
the system user to have full access, but in the meantime, restore the
functionality of the system to unblock development of other issues.

This partially reverts commit 83f2cbc.

Issue #10 Limit sys admins', service agents' ability to view, edit
          enrollments
Issue #546 Post processing fails on submitted enrollment applications
PR #524 Restrict agents and system administrators
  • Loading branch information
jasonaowen committed Dec 21, 2017
1 parent 6cbecea commit 14df294
Showing 1 changed file with 3 additions and 3 deletions.
Expand Up @@ -77,7 +77,6 @@
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Calendar;
import java.util.Collections;
import java.util.Date;
import java.util.HashMap;
import java.util.List;
Expand Down Expand Up @@ -107,8 +106,9 @@ public class ProviderEnrollmentServiceBean extends BaseService implements Provid
/**
* List of roles with full access to all profiles and tickets.
*/
private static final List<String> FULL_ACCESS = Collections.singletonList(
ViewStatics.ROLE_SERVICE_ADMINISTRATOR
private static final List<String> FULL_ACCESS = Arrays.asList(
ViewStatics.ROLE_SERVICE_ADMINISTRATOR,
ViewStatics.ROLE_SYSTEM_ADMINISTRATOR
);

/**
Expand Down

0 comments on commit 14df294

Please sign in to comment.