Author: chrisg
Date: Fri May 15 09:41:23 2009
New Revision: 775072

URL: http://svn.apache.org/viewvc?rev=775072&view=rev
Log:
Applied fix from trunk for revision: 774380 
 Fix for security related error when viewing orders from party screen

Modified:
    
ofbiz/branches/release09.04/applications/party/widget/partymgr/PartyMenus.xml

Modified: 
ofbiz/branches/release09.04/applications/party/widget/partymgr/PartyMenus.xml
URL: 
http://svn.apache.org/viewvc/ofbiz/branches/release09.04/applications/party/widget/partymgr/PartyMenus.xml?rev=775072&r1=775071&r2=775072&view=diff
==============================================================================
--- 
ofbiz/branches/release09.04/applications/party/widget/partymgr/PartyMenus.xml 
(original)
+++ 
ofbiz/branches/release09.04/applications/party/widget/partymgr/PartyMenus.xml 
Fri May 15 09:41:23 2009
@@ -208,7 +208,7 @@
             <condition>
                 <if-has-permission permission="ORDERMGR" action="_VIEW"/>
             </condition>
-            <link target="/ordermgr/control/searchorders" url-mode="inter-app">
+            <link target="/ordermgr/control/searchorders" url-mode="inter-app" 
link-type="hidden-form">
                 <parameter param-name="lookupFlag" value="Y"/>
                 <parameter param-name="hideFields" value="Y"/>
                 <parameter param-name="partyId"/>


Reply via email to