PierreSmits opened a new pull request #388:
URL: https://github.com/apache/ofbiz-framework/pull/388


   Currently, a user with only 'VIEW' permissions, as demonstrated in trunk 
demo with userId = auditor, accessing the Payment Applications screen on a 
payment, sees editable fields and/or triggers (to requests) reserved for users 
with 'CREATE' or 'UPDATE' permissions.
   This can be observed/tested via:
   
https://demo-trunk.ofbiz.apache.org/accounting/control/editPaymentApplications?paymentId=8004
   
https://demo-trunk.ofbiz.apache.org/accounting/control/editPaymentApplications?paymentId=8003
   etc.
   
   modified: PaymentScreens.xml
   restructured screen EditPaymentApplications in order to work for users with 
VIEW and/or CREATE/UPDATE
   permissions, additional cleanup


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@ofbiz.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to