[
https://issues.apache.org/jira/browse/OFBIZ-13130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17876412#comment-17876412
]
ASF subversion and git services commented on OFBIZ-13130:
---------------------------------------------------------
Commit 8b95fe6faf7437dca11bf27f886de9a049db9207 in ofbiz-plugins's branch
refs/heads/release18.12 from Sebastian Tschikin
[ https://gitbox.apache.org/repos/asf?p=ofbiz-plugins.git;h=8b95fe6fa ]
Improved: Add permission check for view-maps and change defaults for
request-maps (OFBIZ-13130) (#126)
* [Improved]: Add permission check for view-maps and change defaults for
request-maps [(OFBIZ-13130)]
Adds missing view-map parameters in plugins/bi to restore the original
functionality.
* [Improved]: Add permission check for view-maps and change defaults for
request-maps [(OFBIZ-13130)]
Adds missing request- and view-map parameters in plugins/ecommerce to
restore the original functionality.
* [Improved]: Add permission check for view-maps and change defaults for
request-maps [(OFBIZ-13130)]
Adds missing view-map parameters in plugins/example to restore the
original functionality.
* [Improved]: Add permission check for view-maps and change defaults for
request-maps [(OFBIZ-13130)]
Adds missing view-map parameters in plugins/myportal to restore the
original functionality.
* [Improved]: Add permission check for view-maps and change defaults for
request-maps [(OFBIZ-13130)]
Adds missing view-map parameters in plugins/scrum to restore the
original functionality.
* [Improved]: Add permission check for view-maps and change defaults for
request-maps [(OFBIZ-13130)]
Adds missing view-map parameters in plugins/solr to restore the original
functionality.
* [Improved]: Add permission check for view-maps and change defaults for
request-maps [(OFBIZ-13130)]
Adds missing request- and view-map parameters in plugins/webpos to
restore the original functionality.
Conflicts handled by hand
ecommerce/webapp/ecommerce/WEB-INF/controller.xml
webpos/webapp/webpos/WEB-INF/controller.xml
> Add permission check for view-maps and change defaults for request-maps
> -----------------------------------------------------------------------
>
> Key: OFBIZ-13130
> URL: https://issues.apache.org/jira/browse/OFBIZ-13130
> Project: OFBiz
> Issue Type: Improvement
> Components: ALL APPLICATIONS, ALL COMPONENTS, ALL PLUGINS
> Affects Versions: 18.12.15
> Reporter: Sebastian Tschikin
> Assignee: Sebastian Tschikin
> Priority: Major
> Fix For: 18.12.16
>
>
> If a user is not authorized, the system should not allow access to rendered
> views.
> Additionally, the default for the request-map paramerters "auth" and "https"
> should be set to "true".
> This improvement aims to enhance security by preventing unauthorized access.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
