Re: Impersonation feature, was: Re: [VOTE] [RELEASE] Apache OFBiz 17.12.01 (full version), vote #3

Are we confident that documentation and/or logging/audit capabilities are up to (potential) expectations? Met vriendelijke groet, Pierre Smits *Proud* *contributor** of* Apache OFBiz since 2008 (without privileges) *Apache Trafodion ,

Re: Impersonation feature, was: Re: [VOTE] [RELEASE] Apache OFBiz 17.12.01 (full version), vote #3

You understand correctly, and moreover a specific permission must be granted to allow the user to impersonate another one. And we even added another security to not allow impersonating a user with more permission than ourselves. When we contributed the feature, it was discussed, and improved

Impersonation feature, was: Re: [VOTE] [RELEASE] Apache OFBiz 17.12.01 (full version), vote #3

*creating a new thread to leave the vote thread untouched* In my understanding from the previous threads about the impersonation features, it is disabled by default and must be enabled explicitly. Using this feature and dealing with the consequences is up to the user then. So I see no valid