Author: jleroux
Date: Mon Jul 19 13:26:33 2010
New Revision: 965470

URL: http://svn.apache.org/viewvc?rev=965470&view=rev
Log:
A patch from David Cervera "Security tag at screen "Payments of Product Store" 
with wrong syntax" (https://issues.apache.org/jira/browse/OFBIZ-3864) - 
OFBIZ-3864

The screen "EditProductStorePaySetup" in 
"OFBIZ_HOME/applications/product/widget/catalog/StoreScreens.xml" (that is, 
section "Payments" of one Product Store, at Catalog app) has a security tag 
with wrong syntax.

It causes that users with right permissions cannot add new payments to the 
store.

You can test it here: 
https://demo-trunk.ofbiz.apache.org:8443/catalog/control/EditProductStorePaySetup?productStoreId=9000
 logged as "flexadmin". The form at the bottom (titled "Edit Product Store 
Payment Setup") doesn't appear.

Modified:
    ofbiz/trunk/applications/product/widget/catalog/StoreScreens.xml

Modified: ofbiz/trunk/applications/product/widget/catalog/StoreScreens.xml
URL: 
http://svn.apache.org/viewvc/ofbiz/trunk/applications/product/widget/catalog/StoreScreens.xml?rev=965470&r1=965469&r2=965470&view=diff
==============================================================================
--- ofbiz/trunk/applications/product/widget/catalog/StoreScreens.xml (original)
+++ ofbiz/trunk/applications/product/widget/catalog/StoreScreens.xml Mon Jul 19 
13:26:33 2010
@@ -353,7 +353,7 @@ under the License.
                         <screenlet 
title="${uiLabelMap.PageTitleEditProductStorePaySetup}">
                             <section>
                                 <condition>
-                                    <if-has-permission permission="CATALOG" 
action="CREATE"/>
+                                    <if-has-permission permission="CATALOG" 
action="_CREATE"/>
                                 </condition>
                                 <widgets>
                                     <include-form 
name="EditProductStorePaymentSetting" 
location="component://product/widget/catalog/ProductStoreForms.xml"/>


Reply via email to