You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@ofbiz.apache.org by Koon Sang <ko...@igine.com> on 2010/02/22 02:47:21 UTC

Interesting Permission?

I notice that when a user only has PARTYMGR_CREATE permission, he can see the
Edit button in My Profile page of My Portal application.  With that
permission, when the user changes his password, the system will check that
the new password cannot be the same as the old password and that the old
password must match the one stored in the system.  However, if I added
PARTYMGR_UPDATE permission to the user, the system will not perform the
check anymore.  Why is that so?

Ofbiz version: 9.04 (2010-02-17)
-- 
View this message in context: http://n4.nabble.com/Interesting-Permission-tp1563979p1563979.html
Sent from the OFBiz - User mailing list archive at Nabble.com.