XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Patch Available
    • Major
    • Resolution: Unresolved
    • None
    • None
    • product/catalog

    Description

      Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the Catalog Main Page, sees triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' permissions.

      To see/test: https://demo-trunk.ofbiz.apache.org/catalog/control/main

      Attachments

        Issue Links

          Activity

            People

              jleroux Jacques Le Roux
              pierresmits Pierre Smits
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated: