[OFBIZ-12529] Party Rates - VIEW permissions

• Type: Improvement
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: Upcoming Branch
• Component/s: party
• Labels: permissions trust usability ux
• Assignee: Pierre Smits
• Reporter: Pierre Smits
• Created: 24/Jan/22 10:21
• Updated: 06/Jun/24 20:42

Description

Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the Party Rates screen, sees editable fields and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' permissions.

To see:/test:

• for DemoEmployee (rates in demo data): https://localhost:8443/partymgr/control/EditPartyRates?partyId=DemoEmployee
• for DemoEmployee2 (after merge of PR74 in plugins): https://localhost:8443/partymgr/control/EditPartyRates?partyId=DemoEmployee2

Issue Links

• links to: GitHub Pull Request #481