Abdullah, Yes, overriding the service without permission check only for ecommerce use seems the better choise IMO
Jacques From: "Abdullah Shaikh" <[email protected]> If I cancel an order item from ecommerce. I get, the below error displayed on the page. The Following Errors Occurred: Unable to cancel order line : WSCO11640 / 00001 / null Note to test this you need to take the latest update of apply this patch https://issues.apache.org/jira/browse/OFBIZ-2408. Below is the error trace from console, this error is because the party (customer) doesn't have the ORDERMGR_CREATE or ORDERMGR_ADMIN permission, but we can't give this permission to a customer, further as the common service is called from ecommerce and order manager for cancel, the solution will be to check the party's role, if its a CUSTOMER, then I guess we can use the SYSTEM user in place of the PARTY(CUSTOMER), for this we need to give ORDERMGR permission to the SYSTEM user. But then it will seem as if the SYSTEM user has cancelled the order and not the CUSTOMER ? Another solution will be to override the service without permission check only for ecommerce use.
