Re: CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

2023-04-11 Thread Jacques Le Roux
Hi Douglas, Your message has been moderated, else it would not have reached this Mailing List. Please subscribe to the user ML for such questions and then use your email client. See why here http://ofbiz.apache.org/mailing-lists.html. You will get a better support, people can answer you on

Re: how to add multiple .ftl files in screen.xml based on user permissions using if else conditions

2023-04-11 Thread Gil Portenseigne
One way of doing that is to have a structure like                 One                                  permission="XERUS_ASSETMAINTENANCE" action="_VIEW"/>            two                

Re: how to add multiple .ftl files in screen.xml based on user permissions using if else conditions

2023-04-11 Thread Mahi maheshwari
Thanks for the response Gil, But I was asking for applying multiple conditions as mentioned below

Re: how to add multiple .ftl files in screen.xml based on user permissions using if else conditions

2023-04-11 Thread Gil Portenseigne
Hello Mahi, You can find multiple examples in the code base looking for : `` One of :         service-name="workEffortGenericPermission" main-action="VIEW"/>             location="component://workeffort/template/task/MyTasks.ftl"/>            

RE: CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

2023-04-11 Thread Douglas Melo
Hello Jacques!! I have a question, is it necessary to update the entire project or just the Solr plugin? On 2023/04/10 09:21:12 Jacques Le Roux wrote: > Severity: important > > Description: > > Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz.This issue affects

how to add multiple .ftl files in screen.xml based on user permissions using if else conditions

2023-04-11 Thread Mahi maheshwari
Hello Community, I want to add .ftl files in screens.xml for multiple users based on a few conditions if there are multiple users named production user and quality user and other users, so for this users if I want to give permission for viewing any .ftl files, how can I do it. *for instance*, if