Pierre Smits created OFBIZ-12488: ------------------------------------ Summary: VIEW permissions - Agreement Key: OFBIZ-12488 URL: https://issues.apache.org/jira/browse/OFBIZ-12488 Project: OFBiz Issue Type: Improvement Components: accounting Affects Versions: Upcoming Branch Reporter: Pierre Smits Assignee: Pierre Smits
Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the agreement screen, sees editable fields and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' permissions. See (test with): https://localhost:8443/accounting/control/EditAgreement?agreementId=DS-1000-SALES -- This message was sent by Atlassian Jira (v8.20.1#820001)