PierreSmits opened a new pull request #388: URL: https://github.com/apache/ofbiz-framework/pull/388
Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the Payment Applications screen on a payment, sees editable fields and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' permissions. This can be observed/tested via: https://demo-trunk.ofbiz.apache.org/accounting/control/editPaymentApplications?paymentId=8004 https://demo-trunk.ofbiz.apache.org/accounting/control/editPaymentApplications?paymentId=8003 etc. modified: PaymentScreens.xml restructured screen EditPaymentApplications in order to work for users with VIEW and/or CREATE/UPDATE permissions, additional cleanup -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@ofbiz.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org