[DEA] User from Different Catchment Able to Add/Remove Members in Unrelated Group Subject Without Error

[mahalakshme]

When a user from a different catchment attempts to view a group subject unrelated to their catchment, an error is triggered as expected when trying to edit the subject group. However, if the user tries to remove or add a member, they are able to successfully add and remove the member without encountering any error.

org : chashma
env : pre-release
user : adam@chashma

Steps to reproduce :

1.Login to the webapp
2.Click on the data entry app
3.Click on the group subject there it is camp
4.click on search
5.click on any of the camp
6.Click on the member
7.Try to add or remove the member

Expected result : User should get the error
Actual result : user can able to add and remove the member

Reference video :

Click here to watch the video