[jira] Created: (OFBIZ-1688) Modify ContentPermissionServices.xml to properly implement Purpose/Operation based security.

[Nicolas Malin (Jira)]

Modify ContentPermissionServices.xml to properly implement Purpose/Operation based security.
--------------------------------------------------------------------------------------------

                 Key: OFBIZ-1688
                 URL: https://issues.apache.org/jira/browse/OFBIZ-1688
             Project: OFBiz
          Issue Type: Improvement
          Components: content
    Affects Versions: SVN trunk
            Reporter: Mridul Pathak
            Priority: Minor
             Fix For: SVN trunk


Improvement required in different methods of ConentPermissionServices.xml to properly implement the Purpose/Operation based security for Contents.  Following methods have been modified either to improve the process or to fix some bug.
1) checkContentOperationSecurity
2) createContentPermission
3) genericContentPermission
4) findAllAssociatedPartyIds

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1688?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mridul Pathak updated OFBIZ-1688:
---------------------------------

    Attachment: ContentPermissionServices_Refactored_29-02-08.patch

Here is the patch for the fix.

> Modify ContentPermissionServices.xml to properly implement Purpose/Operation based security.
> --------------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-1688
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1688
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: content
>    Affects Versions: SVN trunk
>            Reporter: Mridul Pathak
>            Priority: Minor
>             Fix For: SVN trunk
>
>         Attachments: ContentPermissionServices_Refactored_29-02-08.patch
>
>
> Improvement required in different methods of ConentPermissionServices.xml to properly implement the Purpose/Operation based security for Contents.  Following methods have been modified either to improve the process or to fix some bug.
> 1) checkContentOperationSecurity
> 2) createContentPermission
> 3) genericContentPermission
> 4) findAllAssociatedPartyIds

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1688?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12573666#action_12573666 ]

Mridul Pathak commented on OFBIZ-1688:
--------------------------------------

Thanks Andrew for helping me to understand the permission logic in Content component.

> Modify ContentPermissionServices.xml to properly implement Purpose/Operation based security.
> --------------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-1688
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1688
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: content
>    Affects Versions: SVN trunk
>            Reporter: Mridul Pathak
>            Priority: Minor
>             Fix For: SVN trunk
>
>         Attachments: ContentPermissionServices_Refactored_29-02-08.patch
>
>
> Improvement required in different methods of ConentPermissionServices.xml to properly implement the Purpose/Operation based security for Contents.  Following methods have been modified either to improve the process or to fix some bug.
> 1) checkContentOperationSecurity
> 2) createContentPermission
> 3) genericContentPermission
> 4) findAllAssociatedPartyIds

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1688?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ashish Vijaywargiya reassigned OFBIZ-1688:
------------------------------------------

    Assignee: Ashish Vijaywargiya

> Modify ContentPermissionServices.xml to properly implement Purpose/Operation based security.
> --------------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-1688
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1688
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: content
>    Affects Versions: SVN trunk
>            Reporter: Mridul Pathak
>            Assignee: Ashish Vijaywargiya
>            Priority: Minor
>             Fix For: SVN trunk
>
>         Attachments: ContentPermissionServices_Refactored_29-02-08.patch
>
>
> Improvement required in different methods of ConentPermissionServices.xml to properly implement the Purpose/Operation based security for Contents.  Following methods have been modified either to improve the process or to fix some bug.
> 1) checkContentOperationSecurity
> 2) createContentPermission
> 3) genericContentPermission
> 4) findAllAssociatedPartyIds

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1688?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ashish Vijaywargiya closed OFBIZ-1688.
--------------------------------------

    Resolution: Fixed

Thanks Mridul for your patch.
Your patch is in Rev # 632302.

--
Ashish

> Modify ContentPermissionServices.xml to properly implement Purpose/Operation based security.
> --------------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-1688
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1688
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: content
>    Affects Versions: SVN trunk
>            Reporter: Mridul Pathak
>            Assignee: Ashish Vijaywargiya
>            Priority: Minor
>             Fix For: SVN trunk
>
>         Attachments: ContentPermissionServices_Refactored_29-02-08.patch
>
>
> Improvement required in different methods of ConentPermissionServices.xml to properly implement the Purpose/Operation based security for Contents.  Following methods have been modified either to improve the process or to fix some bug.
> 1) checkContentOperationSecurity
> 2) createContentPermission
> 3) genericContentPermission
> 4) findAllAssociatedPartyIds

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.