This is an automated email from the ASF dual-hosted git repository. diveshdut pushed a commit to branch trunk in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit 71055abc9cf41e324c92497fad88419fb3e3471e Author: diveshdut <[email protected]> AuthorDate: Tue Aug 11 16:24:26 2026 +0530 OFBIZ-13422: Require create permission for production runs Add an explicit manufacturing CREATE permission check to createProductionRun so the REST create endpoint follows the same permission pattern as the BOM and routing APIs. --- applications/manufacturing/servicedef/services_production_run.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/applications/manufacturing/servicedef/services_production_run.xml b/applications/manufacturing/servicedef/services_production_run.xml index 44969b9155..f54d921c45 100644 --- a/applications/manufacturing/servicedef/services_production_run.xml +++ b/applications/manufacturing/servicedef/services_production_run.xml @@ -79,6 +79,7 @@ under the License. <service name="createProductionRun" engine="java" location="org.apache.ofbiz.manufacturing.jobshopmgt.ProductionRunServices" invoke="createProductionRun" auth="true"> <description>Create a Production Run</description> + <permission-service service-name="manufacturingPermissionService" main-action="CREATE"/> <attribute name="productId" type="String" mode="IN" optional="false"/> <attribute name="pRQuantity" type="BigDecimal" mode="IN" optional="false"/> <attribute name="startDate" type="java.sql.Timestamp" mode="IN" optional="false"/>
