[
https://issues.apache.org/jira/browse/OFBIZ-12893?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17837099#comment-17837099
]
Jacques Le Roux commented on OFBIZ-12893:
-----------------------------------------
Hi Pierre,
I don't know what I was thinking about. As I said
bq. It could be even backported
of course it should be backported to 18, but I'll not to the "smelly" (kidding)
22 (indeed not 20)
> Screen Security in Party should not show create trigger to user with only
> VIEW permission.
> ------------------------------------------------------------------------------------------
>
> Key: OFBIZ-12893
> URL: https://issues.apache.org/jira/browse/OFBIZ-12893
> Project: OFBiz
> Issue Type: Improvement
> Components: party
> Affects Versions: Upcoming Branch
> Reporter: Pierre Smits
> Priority: Major
>
> When accessing
> [https://demo-trunk.ofbiz.apache.org/partymgr/control/FindSecurityGroup] as a
> user with only VIEW permissions (e.g. userId = auditor) the action trigger to
> create something is shown.
> This should not be visible to such a user as it leads to an undesired effect
> and diminished user experience.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
