[JIRA] Commented: (OFBIZ-579) Can't check out if a requirement must be created

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[JIRA] Commented: (OFBIZ-579) Can't check out if a requirement must be created

JIRA jira@ofbiz.org
     [ http://jira.undersunconsulting.com/browse/OFBIZ-579?page=comments#action_13751 ]
     
Jacopo Cappellato commented on OFBIZ-579:
-----------------------------------------

Can we solve the authorization issue running the service under the "system" account? Is it the right way to go?

> Can't check out if a requirement must be created
> ------------------------------------------------
>
>          Key: OFBIZ-579
>          URL: http://jira.undersunconsulting.com/browse/OFBIZ-579
>      Project: [OFBiz] Open For Business
>         Type: Bug
>   Components: ecommerce, order
>     Versions: SVN
>     Reporter: Si Chen
>     Assignee: Jacopo Cappellato
>     Priority: Minor
>      Fix For: SVN

>
>
> Here's a problem we encountered when we created an item with an ATP inventory quantity threshhold trigger for requirements.  When the system needs to create a requirement, it calls createRequirementFromItemATP, but then that gets tripped on security permission:
> 2081769 (http-0.0.0.0-8443-Processor4) [  ServiceDispatcher.java:407:ERROR] Service Error [createRequirementFromItemATP]: Security Error: to run createOrderRequirementCommitment you must have ORDERMGR_CREATE or ORDERMGR_ADMIN permission calling service createOrderRequirementCommitment in createRequirementAndCommitment
> Unfortunately the ecommerce customer does not have these permissions.
> Would it be ok to remove the permission checking for createOrderRequirementCommitment or otherwise change the permission structure to make it work again?

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.undersunconsulting.com/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira