[jira] Created: (OFBIZ-1591) Security permisson error while editing party profile

[Nicolas Malin (Jira)]

Security permisson error while editing party profile
----------------------------------------------------

                 Key: OFBIZ-1591
                 URL: https://issues.apache.org/jira/browse/OFBIZ-1591
             Project: OFBiz
          Issue Type: Bug
          Components: ecommerce
    Affects Versions: SVN trunk
         Environment: Ubuntu 7.10 Firefox 2.0.0.11
            Reporter: Raj Saini
            Priority: Minor


While editing the party profile in eCommerce application following errors is thrown:

The Following Errors Occurred:

Security Error: you do not have permission to perform updatePerson for this party.

While updating the person, partyIdPermissionCheck simple method checks for the partyid field available in parameters whereas no such field is passed from FTL . Adding a hidden field fixes this problem.

Patch is attached for review.


--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1591?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Raj Saini updated OFBIZ-1591:
-----------------------------

    Attachment: editperson.patch

Fixes this bug by adding a hidden input field in the ftl file.

> Security permisson error while editing party profile
> ----------------------------------------------------
>
>                 Key: OFBIZ-1591
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1591
>             Project: OFBiz
>          Issue Type: Bug
>          Components: ecommerce
>    Affects Versions: SVN trunk
>         Environment: Ubuntu 7.10 Firefox 2.0.0.11
>            Reporter: Raj Saini
>            Priority: Minor
>         Attachments: editperson.patch
>
>
> While editing the party profile in eCommerce application following errors is thrown:
> The Following Errors Occurred:
> Security Error: you do not have permission to perform updatePerson for this party.
> While updating the person, partyIdPermissionCheck simple method checks for the partyid field available in parameters whereas no such field is passed from FTL . Adding a hidden field fixes this problem.
> Patch is attached for review.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1591?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bilgin Ibryam reassigned OFBIZ-1591:
------------------------------------

    Assignee: Bilgin Ibryam

> Security permisson error while editing party profile
> ----------------------------------------------------
>
>                 Key: OFBIZ-1591
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1591
>             Project: OFBiz
>          Issue Type: Bug
>          Components: ecommerce
>    Affects Versions: SVN trunk
>         Environment: Ubuntu 7.10 Firefox 2.0.0.11
>            Reporter: Raj Saini
>            Assignee: Bilgin Ibryam
>            Priority: Minor
>         Attachments: editperson.patch
>
>
> While editing the party profile in eCommerce application following errors is thrown:
> The Following Errors Occurred:
> Security Error: you do not have permission to perform updatePerson for this party.
> While updating the person, partyIdPermissionCheck simple method checks for the partyid field available in parameters whereas no such field is passed from FTL . Adding a hidden field fixes this problem.
> Patch is attached for review.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1591?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bilgin Ibryam closed OFBIZ-1591.
--------------------------------

       Resolution: Fixed
    Fix Version/s: SVN trunk

Thanks Raj,

Your patch is in trunk rev. 614176

> Security permisson error while editing party profile
> ----------------------------------------------------
>
>                 Key: OFBIZ-1591
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1591
>             Project: OFBiz
>          Issue Type: Bug
>          Components: ecommerce
>    Affects Versions: SVN trunk
>         Environment: Ubuntu 7.10 Firefox 2.0.0.11
>            Reporter: Raj Saini
>            Assignee: Bilgin Ibryam
>            Priority: Minor
>             Fix For: SVN trunk
>
>         Attachments: editperson.patch
>
>
> While editing the party profile in eCommerce application following errors is thrown:
> The Following Errors Occurred:
> Security Error: you do not have permission to perform updatePerson for this party.
> While updating the person, partyIdPermissionCheck simple method checks for the partyid field available in parameters whereas no such field is passed from FTL . Adding a hidden field fixes this problem.
> Patch is attached for review.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.