[ 
https://issues.apache.org/jira/browse/OFBIZ-12491?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17479312#comment-17479312
 ] 

ASF subversion and git services commented on OFBIZ-12491:
---------------------------------------------------------

Commit 81df0433bbc5dddb046a2b5ffa29192549e79878 in ofbiz-framework's branch 
refs/heads/trunk from Pierre Smits
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=81df043 ]

Improved: Catalog Screen - VIEW permissions (OFBIZ-12491) (#444)

Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo 
with userId = auditor, accessing the catalog screen, sees editable fields 
and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' 
permissions.
See (test with): 
https://localhost:8443/catalog/control/EditProdCatalog?prodCatalogId=DemoCatalog

modified:
- CatalogScreens.xml
restructured screen EditProductCatalog vis-a-vis permissions
- ProdCatalogForms.xml
added form Catalog for users with VIEW permission

> Catalog Screen - VIEW permission
> --------------------------------
>
>                 Key: OFBIZ-12491
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12491
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: product/catalog
>    Affects Versions: Upcoming Branch
>            Reporter: Pierre Smits
>            Assignee: Pierre Smits
>            Priority: Major
>              Labels: catalog, permissions, trust, usability, ux
>
> Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo 
> with userId = auditor, accessing the catalog screen, sees editable fields 
> and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' 
> permissions.
> See (test with): 
> https://localhost:8443/catalog/control/EditProdCatalog?prodCatalogId=DemoCatalog



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to