Author: sascharodekamp Date: Thu Sep 15 09:17:40 2011 New Revision: 1171020
URL: http://svn.apache.org/viewvc?rev=1171020&view=rev Log: FIX: getOrderStatus service is defined with export="true" (https://issues.apache.org/jira/browse/OFBIZ-4419). A patch from Dimitri Unruh sets the export flag to false: The getOrderStatus service is defined with export="true" without to do any authorization checks. Modified: ofbiz/trunk/applications/order/servicedef/services.xml Modified: ofbiz/trunk/applications/order/servicedef/services.xml URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/order/servicedef/services.xml?rev=1171020&r1=1171019&r2=1171020&view=diff ============================================================================== --- ofbiz/trunk/applications/order/servicedef/services.xml (original) +++ ofbiz/trunk/applications/order/servicedef/services.xml Thu Sep 15 09:17:40 2011 @@ -521,8 +521,8 @@ under the License. <attribute name="orderId" type="String" mode="IN" optional="false"/> <attribute name="shippingAmount" type="BigDecimal" mode="OUT" optional="false"/> </service> - <service name="getOrderStatus" engine="simple" export="true" - location="component://order/script/org/ofbiz/order/order/OrderServices.xml" invoke="getOrderStatus" auth="false"> + <service name="getOrderStatus" engine="simple" location="component://order/script/org/ofbiz/order/order/OrderServices.xml" + invoke="getOrderStatus" auth="false"> <description>Gets the order status</description> <attribute name="orderId" type="String" mode="IN" optional="false"/> <attribute name="statusId" type="String" mode="OUT" optional="false"/>
