[
https://issues.apache.org/jira/browse/OFBIZ-12384?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17445270#comment-17445270
]
Jacques Le Roux commented on OFBIZ-12384:
-----------------------------------------
bq. re: renaming aspect
Yes, I don't exactly know from where it comes (GH patch feature, Windows quirk,
etc.). Anyway I will see later if another case appears...
bq. The improvement does as you're asking; it will show only Payments that are
applied to the invoice.
That was not my question. I was wondering why not showing potential/possible
amount changes to (eg) the auditor? That's my question :)
Also unrelated but I notice that potential/possible amount changes are
duplicated. Seems a bug to me, isn'it ? It's trvial but fhishy.
> User with only 'VIEW' permissions should not editable fields and request
> triggers re invoice payments
> -----------------------------------------------------------------------------------------------------
>
> Key: OFBIZ-12384
> URL: https://issues.apache.org/jira/browse/OFBIZ-12384
> Project: OFBiz
> Issue Type: Improvement
> Components: accounting
> Affects Versions: Trunk
> Reporter: Pierre Smits
> Priority: Major
> Labels: invoice, usability
>
> Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo
> with userId = auditor, accessing the payments screen on an invoice sees
> fields editable and triggers to requests reserved for users with 'CREATE' or
> 'UPDATE' permissions.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
