[
https://issues.apache.org/jira/browse/OFBIZ-13015?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17845867#comment-17845867
]
Pierre Smits commented on OFBIZ-13015:
--------------------------------------
Hi Jacques,
Unfortunately, Adrian. is not around anymore to ask him. At times I feel him
dearly missed as a source of insights and a voice of reason.
Yes, I know bit was implemented 17 years ago. I suggest to log in to any
application with a userLogId that is not one of the *ADMIN' and doesn't have
ASSETMAINT permissions.
E.g. in Manufacturing, when updating a Routing or Task or ProductionRun this
becomes obvious. See attached image.
Furthermore, it has been agreed long ago that there should be no dependencies
of ofbiz-framework application on ofbiz-plugin components.
> Miss UI user message for projectmgr/control/MyTimesheet
> -------------------------------------------------------
>
> Key: OFBIZ-13015
> URL: https://issues.apache.org/jira/browse/OFBIZ-13015
> Project: OFBiz
> Issue Type: Improvement
> Components: projectmgr
> Affects Versions: Upcoming Branch
> Reporter: Jacques Le Roux
> Priority: Minor
> Fix For: Upcoming Branch
>
> Attachments: Screenshot 2024-05-13 at 11.59.32.png
>
>
> Currently there is only a hard legible message for users without sufficient
> permissions (sorry in French):
> ERROR MESSAGE
> java.lang.IllegalArgumentException: Error running script at location
> [component://projectmgr/src/main/groovy/org/apache/ofbiz/projectmgr/EditWeekTimesheet.groovy]:
> org.apache.ofbiz.service.ExecutionServiceException: ERROR: Could not
> complete the Create Timesheet For This Week of no date provided, otherwise
> for a specific week [TimesheetServices.xml#createTimesheetForThisWeek]
> process [problem invoking the [createTimesheet] service with the map named
> [parameters] containing
> [{userLogin=[GenericEntity:UserLogin][createdStamp,2024-04-12
> 02:36:48.635(java.sql.Timestamp)][createdTxStamp,2024-04-12
> 02:36:48.551(java.sql.Timestamp)][currentPassword,{SHA}47b56994cbc2b6d10aa1be30f70165adb305a41a(java.lang.String)][disabledBy,null()][disabledDateTime,null()][enabled,null()][externalAuthId,null()][hasLoggedOut,null()][isSystem,null()][lastCurrencyUom,null()][lastLocale,null()][lastTimeZone,null()][lastUpdatedStamp,2024-04-12
> 02:36:48.635(java.sql.Timestamp)][lastUpdatedTxStamp,2024-04-12
> 02:36:48.551(java.sql.Timestamp)][partyId,DemoAuditor(java.lang.String)][passwordHint,null()][requirePasswordChange,null()][successiveFailedLogins,null()][userLdapDn,null()][userLoginId,auditor(java.lang.String)],
> fromDate=2024-04-07 00:00:00.0,
> timeZone=sun.util.calendar.ZoneInfo[id="Etc/UTC",offset=0,dstSavings=0,useDaylight=false,transitions=0,lastRule=null],
> partyId=DemoAuditor, locale=fr, thruDate=2024-04-13 23:59:59.0}]: Vous
> n'avez pas la permission sur le service createTimesheet, raison : Erreur de
> sécurité : pour exécuter createTimesheet vous devez avoir une des
> autorisations suivantes : ASSETMAINT_CREATE, ASSETMAINT_ADMIN]
> Even if I think users can understand the meaning, it's not very clean
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
