[ 
https://issues.apache.org/jira/browse/OFBIZ-12490?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17479266#comment-17479266
 ] 

ASF subversion and git services commented on OFBIZ-12490:
---------------------------------------------------------

Commit f6625639b57622d85f649dae35f4ac8dca7383a2 in ofbiz-framework's branch 
refs/heads/trunk from Pierre Smits
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=f662563 ]

Improved: Category Products - VIEW permissions (OFBIZ-12490) (#443)

Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo 
with userId = auditor, accessing the category products screen, sees editable 
fields and/or triggers (to requests) reserved for users with 'CREATE' or 
'UPDATE' permissions.
See (test with): 
https://localhost:8443/catalog/control/EditCategoryProducts?productCategoryId=100

modified:
- CategoryScreens.xml
restructured EditCategoryProducts vis-a-vis permissions, additional cleanup
- CategoryForms.xml
added grid CategoryProducts for users with VIEW permissions

> Category Products - VIEW permissions
> ------------------------------------
>
>                 Key: OFBIZ-12490
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12490
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: product/catalog
>    Affects Versions: Upcoming Branch
>            Reporter: Pierre Smits
>            Assignee: Pierre Smits
>            Priority: Major
>              Labels: category, permissions, product, trust, usability, ux
>
> Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo 
> with userId = auditor, accessing the category products screen, sees editable 
> fields and/or triggers (to requests) reserved for users with 'CREATE' or 
> 'UPDATE' permissions.
> See (test with): 
> https://localhost:8443/catalog/control/EditCategoryProducts?productCategoryId=100



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to