You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by ch...@apache.org on 2009/05/13 16:20:01 UTC
svn commit: r774380 -
/ofbiz/trunk/applications/party/widget/partymgr/PartyMenus.xml
Author: chrisg
Date: Wed May 13 14:20:00 2009
New Revision: 774380
URL: http://svn.apache.org/viewvc?rev=774380&view=rev
Log:
Fix for security related error when viewing orders from party screen
(there's more to do, see OFBIZ-2332)
Modified:
ofbiz/trunk/applications/party/widget/partymgr/PartyMenus.xml
Modified: ofbiz/trunk/applications/party/widget/partymgr/PartyMenus.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/party/widget/partymgr/PartyMenus.xml?rev=774380&r1=774379&r2=774380&view=diff
==============================================================================
--- ofbiz/trunk/applications/party/widget/partymgr/PartyMenus.xml (original)
+++ ofbiz/trunk/applications/party/widget/partymgr/PartyMenus.xml Wed May 13 14:20:00 2009
@@ -208,7 +208,7 @@
<condition>
<if-has-permission permission="ORDERMGR" action="_VIEW"/>
</condition>
- <link target="/ordermgr/control/searchorders" url-mode="inter-app">
+ <link target="/ordermgr/control/searchorders" url-mode="inter-app" link-type="hidden-form">
<parameter param-name="lookupFlag" value="Y"/>
<parameter param-name="hideFields" value="Y"/>
<parameter param-name="partyId"/>