[FINERACT-1980] 4-eye checker user can approve their own make command

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.9.0
• Fix Version/s: 1.11.0
• Component/s: Security
• Assignee: Unassigned
• Reporter: Peter Santa
• Created: 19/Sep/23 13:17
• Updated: 22/Aug/24 16:00

Description

Steps to reproduce

• Enable maker-checker functionality and create a role with permission to make and check journal entries
• Create a journal entry
• Send approval for create journal entry command (POST /makercheckers/original make journal entry command ID?command=approve)

Expected results

Check request for own command cannot be executed

Real results

Check request for own command can be executed