-
Type:
Bug
-
Status: Done
-
Priority:
High
-
Resolution: Done
-
Affects Version/s: None
-
Fix Version/s: None
-
Labels:None
-
Company:All Clients/Multiple Clients
-
Epic Link:
observed an issue in the getCandidate and deleteCandidate api.
The candidate shamooka@gmail.com is created at DMS from cbinternalBeta (AccountDID - AKF7Y86DJ2Z4VLMS9MN), but I am able to get the information & also delete the candidate from other system like "cbta (AccountDID - AKD3PK619G7BM6056N6)".
| Field | Original Value | New Value |
|---|---|---|
| Epic Link | DMS-473 [ 75966 ] |
Below are 3C's.
Concern: Other company candidate can be accessed.
Cause: System fetches candidate from email address only , there is no check for company id.
Correction: We have added company check.
CC – Samir
| Status | To Do [ 10000 ] | In Progress [ 3 ] |
| Assignee | Rohan J Khandave [ rohan.khandave ] | Harshveer Singh [ harshveer.singh ] |
| Status | In Progress [ 3 ] | Code Review [ 11801 ] |
-
- Time Spent:
- 4h
-
Analysis code changes
Unit testing
| Remaining Estimate | 0h [ 0 ] | |
| Time Spent | 4h [ 14400 ] | |
| Worklog Id | 203775 [ 203775 ] |
| Status | Code Review [ 11801 ] | In QA Testing [ 11901 ] |
| Assignee | Harshveer Singh [ harshveer.singh ] | Priya Dhamande [ priya.dhamande ] |
| Attachment | Screenshot (568).png [ 122035 ] |
| Resolution | Done [ 10000 ] | |
| Status | In QA Testing [ 11901 ] | Done [ 10001 ] |
| Assignee | Priya Dhamande [ priya.dhamande ] | Rohan J Khandave [ rohan.khandave ] |
Environment: Preprod - ONEIM
API: /api/deleteCandidate
Points verified:
1. Email ID of same companies
2. Email IDS of different companies
Both scenarios passed. refer screen capture. So, marking jira done.
| Time Spent | 4h [ 14400 ] | 4.5h [ 16200 ] |
| Worklog Id | 204163 [ 204163 ] |
| Resolution | Done [ 10000 ] | |
| Status | Done [ 10001 ] | In Progress [ 3 ] |
| Assignee | Rohan J Khandave [ rohan.khandave ] | Priya Dhamande [ priya.dhamande ] |
| Status | In Progress [ 3 ] | In QA Testing [ 11901 ] |
| Resolution | Done [ 10000 ] | |
| Status | In QA Testing [ 11901 ] | Done [ 10001 ] |
| Assignee | Priya Dhamande [ priya.dhamande ] | Rohan J Khandave [ rohan.khandave ] |
| Time Spent | 4.5h [ 16200 ] | 5h [ 18000 ] |
| Worklog Id | 204163 [ 204163 ] |
| Transition | Time In Source Status | Execution Times |
|---|
|
1d 21h 38m | 1 |
|
20s | 1 |
|
21h 55m | 1 |
|
2d 6h 59m | 1 |
|
13s | 1 |
|
3d 17h 34m | 2 |
.png){kind=link}
Below API are targeted
api/deleteCandidate [This api already has company id check]
api/candidateProfile
— > This API will return not found result.
api/candidateProfile/{emailAddress}/{sourceProduct}/{documentId}
---> This API returns not found. Also if provided document id is not matched with email address then also not found with message Document not found for provided email.