[ 
https://issues.apache.org/jira/browse/OFBIZ-12382?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-12382:
---------------------------------
    Description: 
Currently, when a user has only view permissions, as demonstrated in trunk demo 
with userId = auditor, he/she/they can see menu-items in InvoiceSubTab that 
allow him/her/them to trigger requests intended for user with 'Author' or 
'Update' permissions.

This should not be

  was:Currently, when a user has only view permissions, as demonstrated in 
trunk demo with userId = auditor, he/she/they can see menu-items in 
InvoiceSubTab that allow him/her/them to trigger requests intended for user 
with 'Author' or 'Update' permissions.


> User with only 'VIEW' permissions should not see 'action' menu-items
> --------------------------------------------------------------------
>
>                 Key: OFBIZ-12382
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12382
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: accounting
>    Affects Versions: Trunk
>            Reporter: Pierre Smits
>            Assignee: Pierre Smits
>            Priority: Major
>              Labels: invoice, usability
>
> Currently, when a user has only view permissions, as demonstrated in trunk 
> demo with userId = auditor, he/she/they can see menu-items in InvoiceSubTab 
> that allow him/her/them to trigger requests intended for user with 'Author' 
> or 'Update' permissions.
> This should not be



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to