[ofbiz-plugins] branch release18.12 updated: Fixed: Add missing view permissions checks to various screens.

[jacopoc]

This is an automated email from the ASF dual-hosted git repository.

jacopoc pushed a commit to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-plugins.git


The following commit(s) were added to refs/heads/release18.12 by this push:
     new ad91ba4  Fixed: Add missing view permissions checks to various screens.
ad91ba4 is described below

commit ad91ba42c097591f5270d5889f9ee2b773c5385e
Author: Jacopo Cappellato <[hidden email]>
AuthorDate: Fri Nov 15 19:24:22 2019 +0100

    Fixed: Add missing view permissions checks to various screens.
---
 bi/widget/BiScreens.xml         | 3 +++
 pricat/widget/CommonScreens.xml | 3 +++
 scrum/widget/scrumScreens.xml   | 3 +++
 webpos/widget/WebPosScreens.xml | 3 +++
 4 files changed, 12 insertions(+)

diff --git a/bi/widget/BiScreens.xml b/bi/widget/BiScreens.xml
index a6f3a3d..43f92c9 100644
--- a/bi/widget/BiScreens.xml
+++ b/bi/widget/BiScreens.xml
@@ -99,6 +99,9 @@ under the License.
 
     <screen name="main">
         <section>
+            <condition>
+                <if-has-permission permission="BI" action="_VIEW"/>
+            </condition>
             <actions>
                 <set field="titleProperty" value="BusinessIntelligenceMainPage"/>
                 <set field="headerItem" value="main"/>
diff --git a/pricat/widget/CommonScreens.xml b/pricat/widget/CommonScreens.xml
index ca784b1..3411486 100644
--- a/pricat/widget/CommonScreens.xml
+++ b/pricat/widget/CommonScreens.xml
@@ -42,6 +42,9 @@ under the License.
 
     <screen name="viewExcelImportHistory">
         <section>
+            <condition>
+                <if-service-permission service-name="catalogPermissionCheck" main-action="VIEW"/>
+            </condition>
             <actions>
                 <property-map resource="PricatUiLabels" map-name="uiLabelMap" global="true"/>
                 <property-map resource="CommonUiLabels" map-name="uiLabelMap" global="true"/>
diff --git a/scrum/widget/scrumScreens.xml b/scrum/widget/scrumScreens.xml
index fb9c9c4..9b73e8f 100644
--- a/scrum/widget/scrumScreens.xml
+++ b/scrum/widget/scrumScreens.xml
@@ -1542,6 +1542,9 @@ under the License.
     </screen>
     <screen name="ScrumProduct">
         <section>
+            <condition>
+                <if-has-permission permission="SCRUM" action="_VIEW"/>
+            </condition>
             <actions>
                 <set field="titleProperty" value="PageTitleProduct"/>
                 <set field="noConditionFind" value="Y"/>
diff --git a/webpos/widget/WebPosScreens.xml b/webpos/widget/WebPosScreens.xml
index 942adfc..c49e5fa 100644
--- a/webpos/widget/WebPosScreens.xml
+++ b/webpos/widget/WebPosScreens.xml
@@ -23,6 +23,9 @@ under the License.
     
     <screen name="Main">
         <section>
+            <condition>
+                <if-has-permission permission="WEBPOS" action="_VIEW"/>
+            </condition>
             <actions>
                 <set field="titleProperty" value="WebPosMenuMain"/>
                 <set field="leftbarScreenName" value="LeftBar"/>