[jira] Created: (OFBIZ-648) ContentServices.xml setContentStatus does not use content role based security

[Nicolas Malin (Jira)]

ContentServices.xml setContentStatus does not use content role based security
-----------------------------------------------------------------------------

                 Key: OFBIZ-648
                 URL: https://issues.apache.org/jira/browse/OFBIZ-648
             Project: Apache OFBiz (The Open for Business Project)
          Issue Type: Bug
          Components: content
    Affects Versions: SVN trunk
            Reporter: Al Byers
             Fix For: SVN trunk


ContentServices.xml setContentStatus does not use content role based security. It only test whether or not a user has CONTENTMGR_CREATE/ADMIN privileges.

This problem should be evaluated in light of the new security scheme.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-648?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Al Byers resolved OFBIZ-648.
----------------------------

    Resolution: Fixed

I committed at rev 499124 to resolve problem.

> ContentServices.xml setContentStatus does not use content role based security
> -----------------------------------------------------------------------------
>
>                 Key: OFBIZ-648
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-648
>             Project: Apache OFBiz (The Open for Business Project)
>          Issue Type: Bug
>          Components: content
>    Affects Versions: SVN trunk
>            Reporter: Al Byers
>             Fix For: SVN trunk
>
>
> ContentServices.xml setContentStatus does not use content role based security. It only test whether or not a user has CONTENTMGR_CREATE/ADMIN privileges.
> This problem should be evaluated in light of the new security scheme.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-648?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David E. Jones closed OFBIZ-648.
--------------------------------

> ContentServices.xml setContentStatus does not use content role based security
> -----------------------------------------------------------------------------
>
>                 Key: OFBIZ-648
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-648
>             Project: Apache OFBiz (The Open for Business Project)
>          Issue Type: Bug
>          Components: content
>    Affects Versions: SVN trunk
>            Reporter: Al Byers
>             Fix For: SVN trunk
>
>
> ContentServices.xml setContentStatus does not use content role based security. It only test whether or not a user has CONTENTMGR_CREATE/ADMIN privileges.
> This problem should be evaluated in light of the new security scheme.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.