[ 
https://issues.apache.org/jira/browse/OFBIZ-12487?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17479255#comment-17479255
 ] 

ASF subversion and git services commented on OFBIZ-12487:
---------------------------------------------------------

Commit b53d56f8eb2cde64f7953f1f21a98cf368cd4cd8 in ofbiz-framework's branch 
refs/heads/trunk from Pierre Smits
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=b53d56f ]

Improved: VIEW permissions - BillingAccount roles (OFBIZ-12487) (#440)

Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo 
with userId = auditor, accessing the billing account roles screen, sees 
editable fields and/or triggers (to requests) reserved for users with 'CREATE' 
or 'UPDATE' permissions.
See (test with): 
https://localhost:8443/accounting/control/EditBillingAccountRoles?billingAccountId=9010

Modified:
BillingAccountScreens.xml, re EditBillingAccountRoles:
- added permission rules for CREATE/UPDATE
- restructured section and widget/fail-widget elements, additional cleanup
BillingAccountForms.xml
- added grid BillingAccountRoles (based on ListBillingAccountRoles)
- additional cleanup/label harmonisation

> VIEW permissions - BillingAccount roles
> ---------------------------------------
>
>                 Key: OFBIZ-12487
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12487
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: accounting
>    Affects Versions: Upcoming Branch
>            Reporter: Pierre Smits
>            Assignee: Pierre Smits
>            Priority: Major
>              Labels: billing-account, permissions, usability, ux
>
> Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo 
> with userId = auditor, accessing the billing account roles screen, sees 
> editable fields and/or triggers (to requests) reserved for users with 
> 'CREATE' or 'UPDATE' permissions.
> See (test with): 
> https://localhost:8443/accounting/control/EditBillingAccountRoles?billingAccountId=9010



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to