You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by ja...@apache.org on 2026/03/11 17:57:04 UTC
(ofbiz-framework) 06/10: Fixed: Update viewShipmentLabel request to require authentication
This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit dd823588254676e4eccb4e104d7a203946bfdf9e
Author: Jacopo Cappellato <ja...@gmail.com>
AuthorDate: Wed Mar 11 08:28:51 2026 +0100
Fixed: Update viewShipmentLabel request to require authentication
---
applications/product/webapp/facility/WEB-INF/controller.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/applications/product/webapp/facility/WEB-INF/controller.xml b/applications/product/webapp/facility/WEB-INF/controller.xml
index b54fa20465..e7cfcb5ac4 100644
--- a/applications/product/webapp/facility/WEB-INF/controller.xml
+++ b/applications/product/webapp/facility/WEB-INF/controller.xml
@@ -1159,7 +1159,7 @@ under the License.
</request-map>
<!-- note: this is an insecure version of above for purposes of rendering via fop, which cannot access over https -->
<request-map uri="viewShipmentLabel">
- <security https="false" auth="false"/>
+ <security https="false" auth="true"/>
<event type="java" path="org.apache.ofbiz.shipment.shipment.ShipmentEvents" invoke="viewShipmentPackageRouteSegLabelImage"/>
<response name="success" type="none" value=""/>
<response name="error" type="view" value="EditShipmentRouteSegments"/>