[OFBIZ-12384] User with only 'VIEW' permissions and invoice payments

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Implemented
• Affects Version/s: Trunk
• Component/s: accounting
• Labels: invoice usability
• Assignee: Pierre Smits
• Reporter: Pierre Smits
• Created: 16/Nov/21 12:11
• Updated: 11/Jan/22 09:37
• Resolved: 08/Dec/21 12:44

Description

Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the payments screen on an invoice sees fields editable and triggers to requests reserved for users with 'CREATE' or 'UPDATE' permissions.

To see (test): https://demo-trunk.ofbiz.apache.org/accounting/control/editInvoiceApplications?invoiceId=demo10001

Issue Links

• is related to: OFBIZ-12406 remove trigger links in InvoiceOverview already present in menu-items
• is related to: OFBIZ-12403 Duplicated possible payment at /accounting/control/editInvoiceApplications?invoiceId=8010
• relates to: OFBIZ-12405 Rename invoiceApplications menu-item label to Payments
• relates to: OFBIZ-12404 Removing redundant property-maps for labels reference in InvoiceOverview
• links to: GitHub Pull Request #344
• links to: GitHub Pull Request #386