You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by sa...@apache.org on 2011/09/15 11:17:40 UTC
svn commit: r1171020 -
/ofbiz/trunk/applications/order/servicedef/services.xml
Author: sascharodekamp
Date: Thu Sep 15 09:17:40 2011
New Revision: 1171020
URL: http://svn.apache.org/viewvc?rev=1171020&view=rev
Log:
FIX: getOrderStatus service is defined with export="true" (https://issues.apache.org/jira/browse/OFBIZ-4419). A patch from Dimitri Unruh sets the export flag to false: The getOrderStatus service is defined with export="true" without to do any authorization checks.
Modified:
ofbiz/trunk/applications/order/servicedef/services.xml
Modified: ofbiz/trunk/applications/order/servicedef/services.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/order/servicedef/services.xml?rev=1171020&r1=1171019&r2=1171020&view=diff
==============================================================================
--- ofbiz/trunk/applications/order/servicedef/services.xml (original)
+++ ofbiz/trunk/applications/order/servicedef/services.xml Thu Sep 15 09:17:40 2011
@@ -521,8 +521,8 @@ under the License.
<attribute name="orderId" type="String" mode="IN" optional="false"/>
<attribute name="shippingAmount" type="BigDecimal" mode="OUT" optional="false"/>
</service>
- <service name="getOrderStatus" engine="simple" export="true"
- location="component://order/script/org/ofbiz/order/order/OrderServices.xml" invoke="getOrderStatus" auth="false">
+ <service name="getOrderStatus" engine="simple" location="component://order/script/org/ofbiz/order/order/OrderServices.xml"
+ invoke="getOrderStatus" auth="false">
<description>Gets the order status</description>
<attribute name="orderId" type="String" mode="IN" optional="false"/>
<attribute name="statusId" type="String" mode="OUT" optional="false"/>