Pierre Smits created OFBIZ-13088:
------------------------------------

             Summary: CATALOG-Main
                 Key: OFBIZ-13088
                 URL: https://issues.apache.org/jira/browse/OFBIZ-13088
             Project: OFBiz
          Issue Type: Improvement
          Components: product/catalog
            Reporter: Pierre Smits


Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo 
with userId = auditor, accessing the Catalog Main Page, sees triggers (to 
requests) reserved for users with 'CREATE' or 'UPDATE' permissions.

To see/test: https://demo-trunk.ofbiz.apache.org/catalog/control/main



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to