Hi All,

I have searched the mailing lists, which have several references to this issue however none seem to have a definitive answer so i am raising it once again.

When performing Auth+Capture through the payment gateway I am getting the following exception (when logged in as a newly registered user)

"Error: To run createAcctgTransAndEntries you must have the one of the following permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN"

If I log in an checkout as admin who is a member of these groups everything works fine.

I have read http://docs.ofbiz.org/display/OFBTECH/OFBiz+security but am still a little unsure about the "correct" way to implement this security for web users.

It seems intuitively wrong to give accounting permissions to ecommece web user but maybe I am mistaken, perhaps I need to somehow run "createAcctgTransAndEntries" as a different user??

Could someone please point me in the right direction for a recommended approach to this security issue.

Kind Regards

Simon Hutchinson

t: +44 (0)20 7033 2333  m: +44 (0)7595 020569  f: +44 (0)20 7033 2330
a:   Ixxus Limited, Holywell Centre, 1 Phipp Street, London, EC2A 4PS
United Kingdom.  www.ixxus.com <http://www.ixxus.com/>

This message should be regarded as confidential. If you have received
this email in error please notify the sender and destroy it immediately.
Statements of intent shall only become binding when confirmed in hard
copy by an authorised signatory.





Reply via email to