This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/trunk by this push:
new 82e3a64b8b Fixed: Update viewShipmentLabel request to require
authentication
82e3a64b8b is described below
commit 82e3a64b8bab421372c3cfd14693b1543abd28e1
Author: Jacopo Cappellato <[email protected]>
AuthorDate: Wed Mar 11 08:28:51 2026 +0100
Fixed: Update viewShipmentLabel request to require authentication
---
applications/product/webapp/facility/WEB-INF/controller.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/applications/product/webapp/facility/WEB-INF/controller.xml
b/applications/product/webapp/facility/WEB-INF/controller.xml
index b54fa20465..e7cfcb5ac4 100644
--- a/applications/product/webapp/facility/WEB-INF/controller.xml
+++ b/applications/product/webapp/facility/WEB-INF/controller.xml
@@ -1159,7 +1159,7 @@ under the License.
</request-map>
<!-- note: this is an insecure version of above for purposes of rendering
via fop, which cannot access over https -->
<request-map uri="viewShipmentLabel">
- <security https="false" auth="false"/>
+ <security https="false" auth="true"/>
<event type="java"
path="org.apache.ofbiz.shipment.shipment.ShipmentEvents"
invoke="viewShipmentPackageRouteSegLabelImage"/>
<response name="success" type="none" value=""/>
<response name="error" type="view" value="EditShipmentRouteSegments"/>
