[
https://issues.apache.org/jira/browse/OFBIZ-12739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17656537#comment-17656537
]
ASF subversion and git services commented on OFBIZ-12739:
---------------------------------------------------------
Commit 9bf8ee5d18f3e5c9ab7825b0db2d45326800ce13 in ofbiz-framework's branch
refs/heads/trunk from Daniel Watford
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=9bf8ee5d18 ]
Fixed: Permission check when creating a Product Facility (OFBIZ-12739)
Typo in the action being checked when creating a product facility
prevented users with the FACILITY_CREATE permission, but not the
CATALOG_CREATE permission, from creating Product Facilities.
> Permissions: Cannot create product facility when granted FACILITY_CREATE
> permission
> -----------------------------------------------------------------------------------
>
> Key: OFBIZ-12739
> URL: https://issues.apache.org/jira/browse/OFBIZ-12739
> Project: OFBiz
> Issue Type: Bug
> Components: product
> Affects Versions: 22.01.01
> Reporter: Daniel Watford
> Assignee: Daniel Watford
> Priority: Major
> Fix For: 22.01.01
>
>
> A new user was created and granted the following permissions:
> * OFBTOOLS_VIEW
> * FACILITY_VIEW
> * FACILITY_UPDATE
> * FACILITY_CREATE
> * CATALOG_VIEW
> User can navigate to the Catalog webapp and can select a product, e.g.
> [https://demo-next.ofbiz.apache.org/catalog/control/EditProduct?productId=WG-9943]
> User then clicks on the Facilities button, enters details for a facility and
> clicks the Add button.
> The following error is displayed:
> {quote}You haven't the permission for the service createProductFacility,
> reason : Access refused
> {quote}
>
> The createProductFacility service uses permission-service,
> checkProductFacilityRelatedPermission. This permission-service request
> permission checking via another service, checkProductRelatedPermission,
> passing FACILITY as an alternative permission root.
> This alternative permission route is the reason why the user's current set of
> permissions are expected to allow the createProductFacility service to run.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
