Why do you want the system login to create a product?  Isn't that something
a user with the correct permissions would normally do?

Regards
Scott

On 09/10/2007, BJ Freeman <[EMAIL PROTECTED]> wrote:
>
> Claification
>
> https://localhost:8443/webtools/control/availableServices?sel_service_name=createProduct
> so no security
> yet
> org/ofbiz/product/product/ProductServices.xml
> shows
>         <check-permission permission="CATALOG" action="_CREATE">
>             <alt-permission permission="CATALOG_ROLE" action="_CREATE"/>
>             <fail-message message="Security Error: to run createProduct
> you must have the CATALOG_CREATE or CATALOG_ADMIN permission, or the
> limited CATALOG_ROLE_CREATE permission"/>
>         </check-permission>
> so why does this not show up in the services page for createProduct
> is there a bug in the process that read the simple services and not
> catch the security?
>
> could that bug also be causing my problem?
>
> BJ Freeman sent the following on 10/8/2007 12:02 AM:
> > Ok I have dug down into the serviceDipatcher.java and  Modelservice.java
> .
> > and I am lost.
> > I looked at the permissions for createprodcut and I have them on the
> > login that i am passing down.
> > secturity groups
> > CATALOG_ADMIN
> > CATALOGADMIN
> > CATALOG_ADMIN_LTD This is the one in createproducts service.
> > AND
> > FULLADMIN for good messure
> >
> > since I don't see createproduct being used can some one look at it as
> > see if it is the way it is suppose to be.
> >
> > save me some time tracking it down.
> >
> > BJ Freeman sent the following on 10/7/2007 12:17 PM:
> >> do a custom createproduct
> >> getting this message
> >> Service [createProduct] threw an unexpected exception/error
> >> Exception: org.ofbiz.service.ServiceAuthException
> >> Message: User authorization is required for this service: createProduct
> >> I login via
> >>                      userLogin = delegator.findByPrimaryKey("UserLogin",
> UtilMisc
> >>                                      .toMap("userLoginId", "system"));
> >> and passing that in for the login.
> >>
> >> My question is, do I have to explicity add the system login to the
> >> createproduct service or add the permissions in the createproduct
> >> service to the system login?
> >> I believe the latter is the correct way to go.
> >>
> >>
> >>
> >
> >
> >
>

Reply via email to