[ 
http://jira.undersunconsulting.com/browse/OFBIZ-579?page=comments#action_13751 ]
     
Jacopo Cappellato commented on OFBIZ-579:
-----------------------------------------

Can we solve the authorization issue running the service under the "system" 
account? Is it the right way to go?

> Can't check out if a requirement must be created
> ------------------------------------------------
>
>          Key: OFBIZ-579
>          URL: http://jira.undersunconsulting.com/browse/OFBIZ-579
>      Project: [OFBiz] Open For Business
>         Type: Bug
>   Components: ecommerce, order
>     Versions: SVN
>     Reporter: Si Chen
>     Assignee: Jacopo Cappellato
>     Priority: Minor
>      Fix For: SVN

>
>
> Here's a problem we encountered when we created an item with an ATP inventory 
> quantity threshhold trigger for requirements.  When the system needs to 
> create a requirement, it calls createRequirementFromItemATP, but then that 
> gets tripped on security permission:
> 2081769 (http-0.0.0.0-8443-Processor4) [  ServiceDispatcher.java:407:ERROR] 
> Service Error [createRequirementFromItemATP]: Security Error: to run 
> createOrderRequirementCommitment you must have ORDERMGR_CREATE or 
> ORDERMGR_ADMIN permission calling service createOrderRequirementCommitment in 
> createRequirementAndCommitment
> Unfortunately the ecommerce customer does not have these permissions.
> Would it be ok to remove the permission checking for 
> createOrderRequirementCommitment or otherwise change the permission structure 
> to make it work again?

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.undersunconsulting.com/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira

Reply via email to