You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "Krishnauprit18 (via GitHub)" <gi...@apache.org> on 2026/08/24 13:17:36 UTC
[PR] Improved: authorization checks on Catalog and Order Manager helper routes [ofbiz-framework]
Krishnauprit18 opened a new pull request, #1717:
URL: https://github.com/apache/ofbiz-framework/pull/1717
Improved: authorization checks on Catalog and Order Manager helper routes
- getChild and getProductStoreGroupRollupHierarchy in the Catalog Manager
now require login and a CATALOG _VIEW permission check, matching the
pattern used elsewhere in this package.
- Order Manager's quickadd request-map and view-map no longer carry a
stray auth=false override, so it follows the webapp's normal login
requirement like its sibling views.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Improved: authorization checks on Catalog and Order Manager helper routes [ofbiz-framework]
Posted by "ashishvijaywargiya (via GitHub)" <gi...@apache.org>.
ashishvijaywargiya commented on PR #1717:
URL: https://github.com/apache/ofbiz-framework/pull/1717#issuecomment-5404723437
@Krishnauprit18 thank you for your contribution on this issue.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Improved: authorization checks on Catalog and Order Manager helper routes [ofbiz-framework]
Posted by "jacopoc (via GitHub) via notifications" <no...@ofbiz.apache.org>.
jacopoc commented on PR #1717:
URL: https://github.com/apache/ofbiz-framework/pull/1717#issuecomment-6637803398
CVE-2026-83538
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Improved: authorization checks on Catalog and Order Manager helper routes [ofbiz-framework]
Posted by "ashishvijaywargiya (via GitHub)" <gi...@apache.org>.
ashishvijaywargiya merged PR #1717:
URL: https://github.com/apache/ofbiz-framework/pull/1717
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org