[OFBIZ-11786] Packer can change data on shipment

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 17.12.03, Trunk, Upcoming Branch
• Component/s: product
• Labels: refactoring usability
• Assignee: Sebastian Berg
• Reporter: Pierre Smits
• Created: 02/Jun/20 07:02
• Updated: 11/Jan/22 08:48

Description

When a shipment has been created (e.g. https://demo-stable.ofbiz.apache.org/facility/control/ViewShipment?shipmentId=10005), a packer can edit the details via editShipment, including (but not limited to) changing the customer and cost involved.

This should not be possible