1
64%
master: 65%

Ran 18 Jun 2026 03:06PM UTC

Files 852

Run time 31s

Badge

Embed ▾

Committed 18 Jun 2026 02:59PM UTC coverage: 63.728% (+0.05%) from 63.675%

Job # 27768587422.1

Build Type

push

github

Committed by

web-flow

Commit Message

Require Get Alerts privilege to read all users' alerts (#6206)

Backport of #6186 to 2.9.x.

AlertService.getAllAlerts() and getAllAlerts(boolean) return every user's
alerts but were guarded only by @Authorized (authentication), so any
authenticated user could read alerts addressed to others. Introduce a
dedicated Get Alerts privilege (GET_* read-privilege convention) and gate both
methods with it. The per-user reads (getAlert, getAlerts, getAlertsByUser,
getAllActiveAlerts) stay open for a caller reading their own alerts; reading
another user's alerts through them now requires Get Alerts. getAlert(Integer)
returns null (rather than throwing) for another user's alert, the same as for
an unknown id, so it cannot be used as an existence oracle.

The privilege is created on startup via @AddOnStartup / checkCoreDataset() and
is not auto-granted to any role, so it does not reintroduce the leak. The
scheduled AlertReminderTask grants itself a proxy Get Alerts privilege around
its read of all alerts.


Claude-Session: https://claude.ai/code/session_01GswaapaA8WAbd7V7dv3yxW

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Coverage Stats

23940 of 37566 relevant lines covered (63.73%)

0.64 hits per line

openmrs / openmrs-core / 27768587422 / 1
64%
master: 65%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 27768587422.1

openmrs / openmrs-core / 27768587422 / 1 64% master: 65%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 27768587422.1

openmrs / openmrs-core / 27768587422 / 1
64%
master: 65%

README BADGES
x