ofbiz-framework icon indicating copy to clipboard operation
ofbiz-framework copied to clipboard

Published 20 hours ago • verified publisher icon apache

Improved: Catalog Stores - VIEW permissions (OFBIZ-12512)

Open PierreSmits opened this issue 3 years ago • 1 comments

Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the Catalog Stores screen, sees editable fields and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' permissions.

To see/test: https://localhost:8443/catalog/control/EditProdCatalogStores?prodCatalogId=DemoCatalog

Modified:

  • CatalogScreens.xml - restructured screen EditProdCatalogStores to work with permissions
  • ProdCatalogForms.xml - added grid ProductRoles for users with VIEW permissions additional cleanup

PierreSmits avatar Jan 22 '22 12:01 PierreSmits

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

sonarqubecloud[bot] avatar Jan 22 '22 12:01 sonarqubecloud[bot]