PierreSmits opened a new pull request #395: URL: https://github.com/apache/ofbiz-framework/pull/395
Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the Financial Account transactions screen sees editable fields and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' permissions. See (test with): https://demo-trunk.ofbiz.apache.org/accounting/control/EditFinAccount?finAccountId=ABN_CHECKING https://demo-trunk.ofbiz.apache.org/accounting/control/FindFinAccountTrans Modified: FinAccountScreens.xml: restructured screen FindFinAccountTrans FinAccountForms.xml: improved form FindFinAccountTrans Added: FinAccountTrans.ftl, for users with VIEW permissions, additional cleanup FinAccountTransTotals.ftl, improve legibility of code of FinAccountTrans.ftl -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
