[ 
https://issues.apache.org/jira/browse/OFBIZ-12502?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits closed OFBIZ-12502.
--------------------------------
    Fix Version/s: Upcoming Branch
       Resolution: Implemented

Thanks to Jacques for his assistance to get this into the codebase

> PaymentGroup Payments - VIEW permissions
> ----------------------------------------
>
>                 Key: OFBIZ-12502
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12502
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: accounting
>    Affects Versions: Upcoming Branch
>            Reporter: Pierre Smits
>            Assignee: Pierre Smits
>            Priority: Major
>              Labels: payment-group, payments, permissions, trust, usability, 
> ux
>             Fix For: Upcoming Branch
>
>
> Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo 
> with userId = auditor, accessing the Payment Group Payments screen, sees 
> editable fields and/or triggers (to requests) reserved for users with 
> 'CREATE' or 'UPDATE' permissions.
> To see/test: 
> https://localhost:8443/accounting/control/EditPaymentGroupMember?paymentGroupId=9000



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to