[OFBIZ-13128] [CVE-2024-38856] Add permission check for ProgramExport and EntitySQLProcessor

• Type: Sub-task
• Status: Closed
• Priority: Minor
• Resolution: Implemented
• Affects Version/s: 18.12.14
• Fix Version/s: 18.12.14
• Component/s: framework/webtools
• Sprint: Bug Crush Event - 21/2/2015
• Assignee: Deepak Dixit
• Reporter: Jacques Le Roux
• Created: 31/Jul/24 17:05
• Updated: 05/Sep/24 09:57
• Resolved: 31/Jul/24 17:08

Description

If a user does not have the required permissions, the system should not execute the associated Groovy files. This improvement aims to enhance security by preventing unauthorized access to these functionalities.

Issue Links

• links to: https://github.com/apache/ofbiz-framework/pull/821