[
https://issues.apache.org/jira/browse/OFBIZ-3075?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sascha Rodekamp updated OFBIZ-3075:
-----------------------------------
Attachment: OFBIZ-3075_permission error on cancel order.patch
Hi Jacques, hi Abdullah,
i recreated the patch. Jacques can you check if the patch matches now your
requirement. I changed Abdullahs permission service that it only check the
party id and not the ORDER permission.
Cheers
Sascha
> permission error on cancel order item from ecommerce
> ----------------------------------------------------
>
> Key: OFBIZ-3075
> URL: https://issues.apache.org/jira/browse/OFBIZ-3075
> Project: OFBiz
> Issue Type: Bug
> Components: specialpurpose/ecommerce
> Affects Versions: Release Branch 4.0, Release Branch 09.04, SVN trunk
> Reporter: Abdullah Shaikh
> Attachments: OFBIZ-3075_permission error on cancel order.patch,
> OFBIZ-3075_permission error on cancel order.patch
>
>
> If I cancel an order item from ecommerce. I get, the below error displayed on
> the page.
> The Following Errors Occurred:
> Unable to cancel order line : WSCO11640 / 00001 / null
> Below is the error trace from console, this error is because the party
> (customer) doesn't have the ORDERMGR_CREATE or ORDERMGR_ADMIN permission, but
> we can't be this permission to a customer, as the common service is called
> from ecommerce and order manager for cancel, the solution will be to check
> the party's role, if its a CUSTOMER, then I guess we can use the SYSTEM user,
> we need to give ORDERMGR permission to the SYSTEM user.
> But then it will seem as if the SYSTEM user has cancelled the order and not
> the CUSTOMER.
> The exception on the console is below :
> [java] ---- exception report
> ----------------------------------------------------------
> [java] [TransactionUtil.setRollbackOnly] Calling transaction
> setRollbackOnly; this stack trace shows where this is happening:
> [java] Exception: java.lang.Exception
> [java] Message: Error in simple-method [Create an OrderAdjustment
> [file:/home/abdullah/projects/ofbiz_ws/ofbiz/applications/order/script/org/ofbiz/order/order/OrderSimpleMethods.xml#createOrderAdjustment]]:
> ; [Security Error : to run createOrderAdjustment you must have the
> ORDERMGR_CREATE or ORDERMGR_ADMIN permission]
> [java] ---- stack trace
> ---------------------------------------------------------------
> [java] java.lang.Exception: Error in simple-method [Create an
> OrderAdjustment
> [file:/home/abdullah/projects/ofbiz-sagepay_ws/ofbiz/applications/order/script/org/ofbiz/order/order/OrderSimpleMethods.xml#createOrderAdjustment]]:
> ; [Security Error : to run createOrderAdjustment you must have the
> ORDERMGR_CREATE or ORDERMGR_ADMIN permission]
> [java]
> org.ofbiz.entity.transaction.TransactionUtil.setRollbackOnly(TransactionUtil.java:371)
> [java]
> org.ofbiz.entity.transaction.TransactionUtil.rollback(TransactionUtil.java:318)
> [java] org.ofbiz.minilang.SimpleMethod.exec(SimpleMethod.java:833)
> [java]
> org.ofbiz.minilang.SimpleMethod.runSimpleMethod(SimpleMethod.java:160)
> [java]
> org.ofbiz.minilang.SimpleMethod.runSimpleService(SimpleMethod.java:142)
> [java]
> org.ofbiz.minilang.SimpleServiceEngine.serviceInvoker(SimpleServiceEngine.java:78)
> [java]
> org.ofbiz.minilang.SimpleServiceEngine.runSync(SimpleServiceEngine.java:53)
> [java]
> org.ofbiz.service.ModelServiceReader$GenericInvokerImpl.runSync(ModelServiceReader.java:785)
> [java]
> _$gen.file_58$.home.abdullah.projects.ofbiz_45$sagepay_95$ws.ofbiz.applications.order.servicedef.services_46$xml_35$createOrderAdjustment.runSync(file:/home/abdullah/projects/ofbiz-sagepay_ws/ofbiz/applications/order/servicedef/services.xml#createOrderAdjustment:184)
> [java]
> org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:394)
> [java]
> org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:223)
> [java]
> org.ofbiz.service.GenericDispatcher.runSync(GenericDispatcher.java:159)
> [java]
> org.ofbiz.order.order.OrderServices.recalcOrderTax(OrderServices.java:1600)
> [java] sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> [java]
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
> [java]
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
> [java] java.lang.reflect.Method.invoke(Method.java:597)
> [java]
> org.ofbiz.service.engine.StandardJavaEngine.serviceInvoker(StandardJavaEngine.java:100)
> [java]
> org.ofbiz.service.engine.StandardJavaEngine.runSync(StandardJavaEngine.java:57)
> [java]
> org.ofbiz.service.ModelServiceReader$GenericInvokerImpl.runSync(ModelServiceReader.java:785)
> [java]
> _$gen.file_58$.home.abdullah.projects.ofbiz_45$sagepay_95$ws.ofbiz.applications.order.servicedef.services_46$xml_35$recalcTaxTotal.runSync(file:/home/abdullah/projects/ofbiz-sagepay_ws/ofbiz/applications/order/servicedef/services.xml#recalcTaxTotal:252)
> [java]
> org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:394)
> [java]
> org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:223)
> [java]
> org.ofbiz.service.GenericDispatcher.runSync(GenericDispatcher.java:159)
> [java]
> org.ofbiz.service.eca.ServiceEcaAction.runAction(ServiceEcaAction.java:135)
> [java] org.ofbiz.service.eca.ServiceEcaRule.eval(ServiceEcaRule.java:152)
> [java]
> org.ofbiz.service.eca.ServiceEcaUtil.evalRules(ServiceEcaUtil.java:157)
> [java]
> org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:492)
> [java]
> org.ofbiz.service.ServiceDispatcher.runSyncIgnore(ServiceDispatcher.java:236)
> [java]
> org.ofbiz.service.GenericDispatcher.runSyncIgnore(GenericDispatcher.java:185)
> [java]
> org.ofbiz.order.order.OrderServices.cancelOrderItem(OrderServices.java:1971)
> [java] sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> [java]
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
> [java]
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
> [java] java.lang.reflect.Method.invoke(Method.java:597)
> [java]
> org.ofbiz.service.engine.StandardJavaEngine.serviceInvoker(StandardJavaEngine.java:100)
> [java]
> org.ofbiz.service.engine.StandardJavaEngine.runSync(StandardJavaEngine.java:57)
> [java]
> org.ofbiz.service.ModelServiceReader$GenericInvokerImpl.runSync(ModelServiceReader.java:785)
> [java]
> _$gen.file_58$.home.abdullah.projects.ofbiz_45$sagepay_95$ws.ofbiz.applications.order.servicedef.services_46$xml_35$cancelOrderItem.runSync(file:/home/abdullah/projects/ofbiz-sagepay_ws/ofbiz/applications/order/servicedef/services.xml#cancelOrderItem:283)
> [java]
> org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:394)
> [java]
> org.ofbiz.service.ServiceDispatcher.runSync(ServiceDispatcher.java:223)
> [java]
> org.ofbiz.service.GenericDispatcher.runSync(GenericDispatcher.java:159)
> [java]
> org.ofbiz.webapp.event.ServiceEventHandler.invoke(ServiceEventHandler.java:336)
> [java]
> org.ofbiz.webapp.control.RequestHandler.runEvent(RequestHandler.java:611)
> [java]
> org.ofbiz.webapp.control.RequestHandler.doRequest(RequestHandler.java:374)
> [java]
> org.ofbiz.webapp.control.ControlServlet.doGet(ControlServlet.java:216)
> [java]
> org.ofbiz.webapp.control.ControlServlet.doPost(ControlServlet.java:82)
> [java] javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
> [java] javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
> [java]
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> [java]
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> [java]
> org.ofbiz.webapp.control.ContextFilter.doFilter(ContextFilter.java:265)
> [java]
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
> [java]
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> [java]
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
> [java]
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
> [java]
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
> [java]
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> [java]
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> [java]
> org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:568)
> [java]
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
> [java]
> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
> [java]
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
> [java]
> org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
> [java] java.lang.Thread.run(Thread.java:619)
> [java]
> --------------------------------------------------------------------------------
> [java] 2009-10-23 14:36:07,313 (http-0.0.0.0-8443-1) [
> ServiceDispatcher.java:532:ERROR] Error in Service [createOrderAdjustment]:
> Security Error : to run createOrderAdjustment you must have the
> ORDERMGR_CREATE or ORDERMGR_ADMIN permission
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
