[ 
https://issues.apache.org/jira/browse/OFBIZ-5920?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Deepak Dixit updated OFBIZ-5920:
--------------------------------
    Description: 
action value used in if-has-permission tag is incorrect in some places. Ideally 
action value should be start with "_" but some places it used without "_"

ForumScreens.xml#ViewForumMessage
{code}
<if-has-permission permission="CONTENTMGR" action="CREATE"/>
{code}

Due to this if user has correct permission then also it return false and user 
will not be able to view the screen.

  was:
action value used in if-has-permission tag is incorrect in some places. Ideally 
action value should be start with "_" but some places it used without "_"

ForumScreens.xml#ViewForumMessage
{code}
<if-has-permission permission="CONTENTMGR" action="CREATE"/>
{code}

Due to this if user has correct permission then also it return false and user 
will be able to view the screen.


> Incorrect use of if-has-permission tag
> --------------------------------------
>
>                 Key: OFBIZ-5920
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-5920
>             Project: OFBiz
>          Issue Type: Bug
>          Components: specialpurpose/ecommerce
>    Affects Versions: Release Branch 13.07, Trunk
>            Reporter: Deepak Dixit
>            Priority: Minor
>         Attachments: OFBIZ-5920.patch
>
>
> action value used in if-has-permission tag is incorrect in some places. 
> Ideally action value should be start with "_" but some places it used without 
> "_"
> ForumScreens.xml#ViewForumMessage
> {code}
> <if-has-permission permission="CONTENTMGR" action="CREATE"/>
> {code}
> Due to this if user has correct permission then also it return false and user 
> will not be able to view the screen.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to