Web User Permission

[Simon Hutchinson <si...@ixxus.co.uk>]

Hi All,

I have searched the mailing lists, which have several references to  
this issue however none seem to have a definitive answer so i am  
raising it once again.

When performing Auth+Capture through the payment gateway I am getting  
the following exception (when logged in as a newly registered user)

"Error: To run createAcctgTransAndEntries you must have the one of the  
following permissions: ACCTG_ATX_CREATE, ACCTG_ATX_ADMIN"

If I log in an checkout as admin who is a member of these groups  
everything works fine.

I have read http://docs.ofbiz.org/display/OFBTECH/OFBiz+security but  
am still a little unsure about the "correct" way to implement this  
security for web users.

It seems intuitively wrong to give accounting permissions to ecommece  
web user but maybe I am mistaken, perhaps I need to somehow run  
"createAcctgTransAndEntries" as  a different user??

Could someone please point me in the right direction for a recommended  
approach to this security issue.

Kind Regards

Simon Hutchinson

t: +44 (0)20 7033 2333  m: +44 (0)7595 020569  f: +44 (0)20 7033 2330
a:   Ixxus Limited, Holywell Centre, 1 Phipp Street, London, EC2A 4PS
United Kingdom.  www.ixxus.com <http://www.ixxus.com/>

This message should be regarded as confidential. If you have received
this email in error please notify the sender and destroy it immediately.
Statements of intent shall only become binding when confirmed in hard
copy by an authorised signatory.