#33 You can remove all recipients and still send message

[Aaron Toth]

Steps to reproduce:

1) login to the MyOSCAR portal as a care provider
2) go to the messages and send a message to one of their demographic patients
3) logout of MyOSCAR and log back in as the messaged demogrphaic user
4) navigate to the messages and view the message from the care provider
5) click the message and choose "Reply-all"
6) before clicking send, remove the recipient (there will only be one)
7) click send

---

The message will be sent (UI says that it is sent). If you log back in as the care provider you will not see the message.

If you just try to send a message without a recipient you get the warning that you must select a recipient. This is the only scenario that causes this false positive.

this was found in :

-rw-rw-r-- 1 aaron aaron 54430685 Apr 19 15:14 myoscar_server-2013.03-SNAPSHOT.war