[OFBIZ-12563] Find Billing Account screen shows 'create' trigger to user with VIEW permission

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Implemented
• Affects Version/s: Upcoming Branch
• Component/s: accounting
• Labels: billing-account permissions trust user-experience
• Assignee: Unassigned
• Reporter: Pierre Smits
• Created: 08/Feb/22 21:19
• Updated: 13/Apr/24 07:59
• Resolved: 13/Apr/24 07:59

Description

When accessing  https://localhost:8443/accounting/control/FindBillingAccount as a user with only VIEW permissions (e.g. userId=auditor, the action trigger to create something is shown. This should not be visible to such a user as it leads to a undesired effect and diminished user experience.