Claification
https://localhost:8443/webtools/control/availableServices?sel_service_name=createProduct
so no security
yet
org/ofbiz/product/product/ProductServices.xml
shows
<check-permission permission="CATALOG" action="_CREATE">
<alt-permission permission="CATALOG_ROLE" action="_CREATE"/>
<fail-message message="Security Error: to run createProduct
you must have the CATALOG_CREATE or CATALOG_ADMIN permission, or the
limited CATALOG_ROLE_CREATE permission"/>
</check-permission>
so why does this not show up in the services page for createProduct
is there a bug in the process that read the simple services and not
catch the security?
could that bug also be causing my problem?
BJ Freeman sent the following on 10/8/2007 12:02 AM:
> Ok I have dug down into the serviceDipatcher.java and Modelservice.java.
> and I am lost.
> I looked at the permissions for createprodcut and I have them on the
> login that i am passing down.
> secturity groups
> CATALOG_ADMIN
> CATALOGADMIN
> CATALOG_ADMIN_LTD This is the one in createproducts service.
> AND
> FULLADMIN for good messure
>
> since I don't see createproduct being used can some one look at it as
> see if it is the way it is suppose to be.
>
> save me some time tracking it down.
>
> BJ Freeman sent the following on 10/7/2007 12:17 PM:
>> do a custom createproduct
>> getting this message
>> Service [createProduct] threw an unexpected exception/error
>> Exception: org.ofbiz.service.ServiceAuthException
>> Message: User authorization is required for this service: createProduct
>> I login via
>> userLogin = delegator.findByPrimaryKey("UserLogin",
>> UtilMisc
>> .toMap("userLoginId", "system"));
>> and passing that in for the login.
>>
>> My question is, do I have to explicity add the system login to the
>> createproduct service or add the permissions in the createproduct
>> service to the system login?
>> I believe the latter is the correct way to go.
>>
>>
>>
>
>
>
