You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by GitBox <gi...@apache.org> on 2026/10/20 16:24:53 UTC

[GH] (ofbiz-framework/shopping-list-owner-check): Workflow run "Java CI with Gradle" is working again!

The GitHub Actions job "Java CI with Gradle" on ofbiz-framework.git/shopping-list-owner-check has succeeded.
Run started by GitHub user mridulpathak (triggered by mridulpathak).

Head commit for run:
d6e1173d9d0ac53f8ec32e37172bf68022758933 / Mridul Pathak <mr...@gmail.com>
Fixed: Check the owner of the shopping list in checkShoppingListSecurity

checkShoppingListSecurity only compared the partyId passed to the service with the logged-in user, and did not look at who owns the shopping list being updated or removed. It now loads the list when a shoppingListId is passed and requires the logged-in user to be its owner or to have the PARTYMGR permission, as checkShoppingListItemSecurity already does for list items.

Report URL: https://github.com/apache/ofbiz-framework/actions/runs/39398161466

With regards,
GitHub Actions via GitBox