Skip to content

Fix permission checks for tile management #259

Description

@gita-agents

Replace incorrect user permission check in cleanup_tiles_for_floor with appropriate tile-management authorization.

Findings (1)

  • [MEDIUM] bug at backend/app/services/tile_service.py:191 — Incorrect permission check in cleanup_tiles_for_floor: line 191 checks user.can_manage_users() but should check user.can_manage_critical_sectors() or a tile-management-specific permission. can_manage_users() is for user administration, not tile management.
    Fix sketch: Replace can_manage_users() with an appropriate permission check for tile management, such as checking if user is admin or supervisor.

Generated by GITA v0.1.0 onboarding agent against amass. Milestone confidence: 0.85.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions