[jira] [Updated] (OFBIZ-5920) Incorrect use of if-has-permission tag

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Updated] (OFBIZ-5920) Incorrect use of if-has-permission tag

Nicolas Malin (Jira)

     [ https://issues.apache.org/jira/browse/OFBIZ-5920?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Deepak Dixit updated OFBIZ-5920:
--------------------------------
    Description:
action value used in if-has-permission tag is incorrect in some places. Ideally action value should be start with "_" but some places it used without "_"

ForumScreens.xml#ViewForumMessage
{code}
<if-has-permission permission="CONTENTMGR" action="CREATE"/>
{code}

Due to this if user has correct permission then also it return false and user will not be able to view the screen.

  was:
action value used in if-has-permission tag is incorrect in some places. Ideally action value should be start with "_" but some places it used without "_"

ForumScreens.xml#ViewForumMessage
{code}
<if-has-permission permission="CONTENTMGR" action="CREATE"/>
{code}

Due to this if user has correct permission then also it return false and user will be able to view the screen.


> Incorrect use of if-has-permission tag
> --------------------------------------
>
>                 Key: OFBIZ-5920
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-5920
>             Project: OFBiz
>          Issue Type: Bug
>          Components: specialpurpose/ecommerce
>    Affects Versions: Release Branch 13.07, Trunk
>            Reporter: Deepak Dixit
>            Priority: Minor
>         Attachments: OFBIZ-5920.patch
>
>
> action value used in if-has-permission tag is incorrect in some places. Ideally action value should be start with "_" but some places it used without "_"
> ForumScreens.xml#ViewForumMessage
> {code}
> <if-has-permission permission="CONTENTMGR" action="CREATE"/>
> {code}
> Due to this if user has correct permission then also it return false and user will not be able to view the screen.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)