You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by "Pierre Smits (Jira)" <ji...@apache.org> on 2022/01/25 09:10:00 UTC

[jira] [Updated] (OFBIZ-12532) Accounting Transaction - VIEW permissions

     [ https://issues.apache.org/jira/browse/OFBIZ-12532?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pierre Smits updated OFBIZ-12532:
---------------------------------
    Description: 
Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the accounting transactions screen, sees editable fields and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' permissions in unposted transactions.

 

To see/test with an unposed transaction: [https://localhost:8443/accounting/control/EditAcctgTrans?organizationPartyId=Company&acctgTransId=10000] 

  was:
Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the accounting transactions screen, sees editable fields and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' permissions in unposted transactions.

 

To see/test: https://localhost:8443/accounting/control/EditAcctgTrans?organizationPartyId=Company&acctgTransId=10000


> Accounting Transaction - VIEW permissions
> -----------------------------------------
>
>                 Key: OFBIZ-12532
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12532
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: accounting
>    Affects Versions: Upcoming Branch
>            Reporter: Pierre Smits
>            Assignee: Pierre Smits
>            Priority: Major
>              Labels: permissions, transaction, trust, usability, ux
>
> Currently, a user with only 'VIEW' permissions, as demonstrated in trunk demo with userId = auditor, accessing the accounting transactions screen, sees editable fields and/or triggers (to requests) reserved for users with 'CREATE' or 'UPDATE' permissions in unposted transactions.
>  
> To see/test with an unposed transaction: [https://localhost:8443/accounting/control/EditAcctgTrans?organizationPartyId=Company&acctgTransId=10000] 



--
This message was sent by Atlassian Jira
(v8.20.1#820001)