Details
-
Type: Bug
-
Status: Closed
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: 4.5.0
-
Fix Version/s: 4.5.2
-
Component/s: Client Interface, Staff Interface
-
Labels:None
Description
It's possible for staff to see invoices of a different client than they are logged-in as if they previously attempted to make a payment while logged-in as a separate client.
To replicate:
- Log in as a client
- Click an invoice to "Pay"
- Go back to the staff portal
- Go to another client's profile in the staff UI that has past due invoices
- Click to "Login as Client"
- Click "Pay Past Due" invoices
- The invoices you see will be for the first client (#1) you logged in as rather than the current client (#5) because the system determines the client from the payment information rather than the one that you are logged-in as
To fix:
- Clear any stored payment session information if the client it associates with differs from the client that is logged-in
When logged is as an admin, and using the "Login as Client" option, and clicking the button to "Pay Past Due" invoices in the alert box, it sometimes displays the invoice for another client.
To replicate I created 2 clients, each with a past due invoice. I logged in as an admin into the client, and clicked the "Pay Past Due" button. The invoice for the other client was shown instead of the invoice on the account. I tried it the other way, by logging into the other client, and it did not work. It appears to impact some clients but not others.
It does not appear to do this if logged in only as a client, so it seems to be limited to Staff logged in as a Client.
Issue Links
- relates to
-
CORE-3108 Clients unable to complete payment when not logged in using pay link
- Closed
Activity
Field | Original Value | New Value |
---|---|---|
Rank | Ranked higher |
Sprint | 4.6.0 Sprint 4 [ 80 ] |
Rank | Ranked lower |
Rank | Ranked higher |
Fix Version/s | 4.5.2 [ 11119 ] |
Fix Version/s | 4.6.0-b1 [ 11117 ] |
Assignee | Tyson Phillips [ tyson ] |
Status | Open [ 1 ] | In Progress [ 3 ] |
Status | In Progress [ 3 ] | In Review [ 5 ] |
Resolution | Fixed [ 1 ] |
Summary | Staff login as client wrong invoice | Staff logged-in as client may show wrong invoices |
Summary | Staff logged-in as client may show wrong invoices | Staff logged-in as client may show wrong invoices to pay |
Description |
When logged is as an admin, and using the "Login as Client" option, and clicking the button to "Pay Past Due" invoices in the alert box, it sometimes displays the invoice for another client.
To replicate I created 2 clients, each with a past due invoice. I logged in as an admin into the client, and clicked the "Pay Past Due" button. The invoice for the other client was shown instead of the invoice on the account. I tried it the other way, by logging into the other client, and it did not work. It appears to impact some clients but not others. It does not appear to do this if logged in only as a client, so it seems to be limited to Staff logged in as a Client. |
It's possible for staff to see invoices of a different client than they are logged-in as if they previously attempted to make a payment while logged-in as a separate client.
To replicate: # Log in as a client # Click an invoice to "Pay" # Go back to the staff portal # Go to another client's profile in the staff UI that has past due invoices # Click to "Login as Client" # Click "Pay Past Due" invoices # The invoices you see will be for the first client (#1) you logged in as rather than the current client (#5) because the system determines the client from the payment information rather than the one that you are logged-in as To fix: # Clear any stored payment session information if the client it associates with differs from the client that is logged-in ---- When logged is as an admin, and using the "Login as Client" option, and clicking the button to "Pay Past Due" invoices in the alert box, it sometimes displays the invoice for another client. To replicate I created 2 clients, each with a past due invoice. I logged in as an admin into the client, and clicked the "Pay Past Due" button. The invoice for the other client was shown instead of the invoice on the account. I tried it the other way, by logging into the other client, and it did not work. It appears to impact some clients but not others. It does not appear to do this if logged in only as a client, so it seems to be limited to Staff logged in as a Client. |
Remaining Estimate | 0 minutes [ 0 ] | |
Time Spent | 1 hour [ 3600 ] | |
Worklog Id | 12037 [ 12037 ] |
Time Spent | 1 hour [ 3600 ] | 1 hour, 16 minutes [ 4560 ] |
Worklog Id | 12040 [ 12040 ] |
Status | In Review [ 5 ] | Closed [ 6 ] |
Strangely after I reproduced this issue, I'm not longer able to reproduce it with the same clients and invoices. Something odd indeed.