[ 
https://issues.apache.org/jira/browse/OFBIZ-11342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17032513#comment-17032513
 ] 

Gil Portenseigne commented on OFBIZ-11342:
------------------------------------------

Three patch that, applied in order do :
 * add a basic unit test for permission validation
 * add a test addressing the issue
 * implements a fix for the issue

> Error in user impersonation with sub permission
> -----------------------------------------------
>
>                 Key: OFBIZ-11342
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-11342
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: Upcoming Branch, Release Branch 17.12, Release Branch 
> 18.12
>            Reporter: Gil Portenseigne
>            Assignee: Gil Portenseigne
>            Priority: Minor
>         Attachments: 
> 0001-Add-a-new-unit-test-to-validate-adminPermissionTesti.patch, 
> 0002-Add-a-new-test-for-multi-level-permission.patch, 
> 0003-Implements-multiLevel-permission-control.patch
>
>
> When impersonating user with sub permission such as : PARTYMGR_PCM_CREATE, 
> with an admin user that only has PARTYMGR_ADMIN, the impersonation is refused 
> stating that the impersonated user has more permission than the impersonator.
>  
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to