Jacopo,
David suggested putting an ECA on the original service's permission checking service - a really cool
idea. Problem is, it doesn't work because of flaws in the service engine. I've submitted fixes to
Jira during the last few days but they haven't been committed. Once they are in, then the capability
you describe will be very easy.
-Adrian
Jacques Le Roux wrote:
Actually, I just discovered the new permission framework (build by Andy six
months ago, I'm shameful).
https://issues.apache.org/jira/browse/OFBIZ-609
Now that I have understood how it works in less than half an hour (I guess I
was afraid and did not look before Adrian said it was
easy to use) I'd like to help. But I'm afraid I have too much thinks already
waiting... If nobody tackle with this before me, I will
help after finishing current OFBiz tasks pending.
Really cool stuff !
Jacques
De : "Jacopo Cappellato" <[EMAIL PROTECTED]>
Hi all,
I need to grant a user (from a custom application) the ability to lookup
products, i.e. to use the LookupProduct screen, but the screen requires
the CATALOG_VIEW permission; and with this permission the user has also
access to the Catalog application, including all the stores settings and
products/prices etc...
What is the best way of resolving this? Should we create a new
permission (PRODUCT_VIEW or PRODUCT_LOOKUP_VIEW) for the lookup screen?
Thanks,
Jacopo
