[OFBIZ-12495] Request Roles - VIEW permission

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Implemented
• Affects Version/s: Upcoming Branch
• Fix Version/s: Upcoming Branch
• Component/s: order
• Labels: permissions request roles trust usability ux
• Assignee: Pierre Smits
• Reporter: Pierre Smits
• Created: 13/Jan/22 13:54
• Updated: 20/Jan/22 13:22
• Resolved: 20/Jan/22 13:22

Description

Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the Request Roles screen, sees editable fields and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' permissions.

https://localhost:8443/ordermgr/control/requestroles?custRequestId=9000

Issue Links

• links to: GitHub Pull Request #448