[
https://issues.apache.org/jira/browse/OFBIZ-12893?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17836968#comment-17836968
]
Jacques Le Roux commented on OFBIZ-12893:
-----------------------------------------
Hi Pierre,
Sincerely I'll not backport to R18.12; and R20.01, like Zappa said, is not
dead, it just smells funny.
> Screen Security in Party should not show create trigger to user with only
> VIEW permission.
> ------------------------------------------------------------------------------------------
>
> Key: OFBIZ-12893
> URL: https://issues.apache.org/jira/browse/OFBIZ-12893
> Project: OFBiz
> Issue Type: Improvement
> Components: party
> Affects Versions: Upcoming Branch
> Reporter: Pierre Smits
> Priority: Major
>
> When accessing
> [https://demo-trunk.ofbiz.apache.org/partymgr/control/FindSecurityGroup] as a
> user with only VIEW permissions (e.g. userId = auditor) the action trigger to
> create something is shown.
> This should not be visible to such a user as it leads to an undesired effect
> and diminished user experience.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
