Hi Ashwin Wankhede,

CheckPageLevelAccess key is set to false on Azure. Due to this authorization is not getting verified on Azure.

I feel all keys should match to Stage and not from local. It will be really good if we do these changes at the earliest, well before build.

Please do the needful.

Thanks,
Vijayendra

CC: shyam sharma

Hi Vijayendra Shinde,

i have updated config on azure environment and also checked-in changes in UI Refresh branch as per New LB server.

I will carry out this activity again before Codemap to Azure build.

Prasad Pise,

Can you please check, is issue still exists on Azure?

Thank you.

CC: shyam sharma

Hi Prasad Pise,

I have verified the issue by following above mentioned steps.
Issue is still re-producible.
Employee is able to access admin level home page, company information page,and all other pages and have an access to update the data.

Thanks,
Jayshree

cc : Rakesh Roy

Hi Nidhi Kaul / Vijayendra Shinde

This issue is reproducible. Please take it ahead.

Prasad Pise Vijayendra Shinde Nidhi Kaul

I have verified this issue on 'UI Refresh Automation' company. The issue still persists.

Repro Steps:

1. Login with partner credentials
2. Navigate to 'UI Refresh Automation' company.
3. Change any employee password
4. Login with this employee in other browser
5. Copy the link ‘Change employee class/Status’ from partner login to the browser where same employee is logged in
6. Employee is able to change the class/status.

Hi Ashwin Wankhede,

This is second time same issue getting reported due to same reason. Again, pageleveacecss key is set to false and qa are doing security testing. Please refer attached snapshot which will show azure flag is set to false.

Nidhi Kaul,
I feel we really need to figure out how we can stop such issues getting reported multiple times with same reason.

Thanks,
Vijayendra
CC:Bharti Satpute,Samir

Hi Vijayendra Shinde,

As discussed, This is set to "False" as all PagelevelAccess entries are not present. Hence we can athorization errors. Please let me know once all required entries are present. I will set back checkPageLevelAccess flag to true.

Hi Ashwin Wankhede

Can you please let me know once the PagelevelAccess flag is set to 'True' so that we can check if the same error occurs.

Regards,
Anirudha Joshi

CC: Vijayendra Shinde Prasad Pise

Hi Khandu Kshirsagar,

Can you please set "CheckPageLevelAccess" flag to true on azure.

Hi Ashwin Wankhede,

Done.

Ashwin Wankhede

Hi Ashwin Wankhede Vijayendra Shinde

I verified this issue with PagelevelAccess flag set to True. The issue still persists
Below are the steps executed and the observations.

Repro Steps:

• Login with partner credentials
• Navigate to 'UI Refresh Automation' company.
• Change any employee password
• Login with this employee in other browser
• Copy the link ‘Change employee Status’ from partner login to the browser where same employee is logged in
• Employee is able to change the class/status.

Observations:
Eemployee is able to access the 'Change Status' page from partner login.
Employee is able to access 'BenAdmin -> Pending Queue' page from partner login.

I verified different pages from BenAdmin, Onboard, Core HR tabs of partner login. Above 2 pages were accessible to the employee even after the 'PageLevelAccess' was set to 'True'.

Regards,
Anirudha Joshi

CC: Prasad Pise Nidhi Kaul Bharti Satpute Samir Rakesh Roy

Hi Ashwin Wankhede,

I have checked this issue and found that it is working on local (development) environment. But not working on codemap.
Need to check web.config on codemap machine.

Thanks,
Vishal Y

CC : Vijayendra Shinde

affected files :

/branches/UiRefresh/Config Files WT Stage/Web Server/Web.config

Hi Prasad Pise,

Please check this issue after next azure build.

Thanks,
Vishal Y