[ 
https://issues.apache.org/jira/browse/OFBIZ-12415?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17449976#comment-17449976
 ] 

Pierre Smits commented on OFBIZ-12415:
--------------------------------------

Bonjour Jacques,

As you can see in screen InvoiceOverview in InvoiceScreens.xml the form used to 
show the invoice items on the overview is 'InvoiceItems'. This form in 
InvoiceForms.xml takes as input the list ínvItemsAndOrdItems', which is 
populated by 
{code:java}
<entity-condition entity-name="InvItemAndOrdItem" list="invItemAndOrdItems">
 <condition-expr field-name="invoiceId"  operator="equals" 
from-field="invoiceId"/>
 <order-by field-name="invoiceItemSeqId"/>
</entity-condition> {code}
So, in order to show the items via menu-item 'items' to the user with VIEW 
permissions, you need this.

Tangent: IMO, the overview in 
https://demo-trunk.ofbiz.apache.org/accounting/control/invoiceOverview?invoiceId=demo10001
 could do with a little less cluttering data elements (fields) in the items 
section, while the overview in 
[https://demo-trunk.ofbiz.apache.org/accounting/control/listInvoiceItems?invoiceId=demo10001]
 should show all data fields of a InvoiceItem record per line item. But that 
should be another ticket.

> User with only 'VIEW' permissions and invoice items
> ---------------------------------------------------
>
>                 Key: OFBIZ-12415
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12415
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: accounting
>    Affects Versions: Trunk
>            Reporter: Pierre Smits
>            Assignee: Pierre Smits
>            Priority: Major
>              Labels: invoice, permissions, usability
>
> Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo 
> with userId = auditor, accessing the items screen on an invoice sees fields 
> editable and triggers to requests reserved for users with 'CREATE' or 
> 'UPDATE' permissions.
> See 
> https://demo-trunk.ofbiz.apache.org/accounting/control/listInvoiceItems?invoiceId=demo10001



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to