svn commit: r1835586 - /ofbiz/ofbiz-framework/trunk/framework/common/webcommon/WEB-INF/common-controller.xml

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

svn commit: r1835586 - /ofbiz/ofbiz-framework/trunk/framework/common/webcommon/WEB-INF/common-controller.xml

jleroux@apache.org
Author: jleroux
Date: Tue Jul 10 17:31:50 2018
New Revision: 1835586

URL: http://svn.apache.org/viewvc?rev=1835586&view=rev
Log:
Fixed: setLocaleFromBrowser requires authentification
(OFBIZ-10460)

The setLocaleFromBrowser request map defined in common-controller.xml has an
attribute of auth=false
While the service associated with it in framework/common/servicedef/services.xml
has an attribute of auth=true.

jleroux: this was missing in the initial patch. At OFBIZ-9264 the description is
    "it sets the time zone of the user logged in to it's browser time zone."
So being logged in seems needed, hence better to set auth=true everywhere

Thanks: Mathieu Lirzin for report

Modified:
    ofbiz/ofbiz-framework/trunk/framework/common/webcommon/WEB-INF/common-controller.xml

Modified: ofbiz/ofbiz-framework/trunk/framework/common/webcommon/WEB-INF/common-controller.xml
URL: http://svn.apache.org/viewvc/ofbiz/ofbiz-framework/trunk/framework/common/webcommon/WEB-INF/common-controller.xml?rev=1835586&r1=1835585&r2=1835586&view=diff
==============================================================================
--- ofbiz/ofbiz-framework/trunk/framework/common/webcommon/WEB-INF/common-controller.xml (original)
+++ ofbiz/ofbiz-framework/trunk/framework/common/webcommon/WEB-INF/common-controller.xml Tue Jul 10 17:31:50 2018
@@ -302,7 +302,7 @@ under the License.
 
     <!-- Set local from user's browser -->
     <request-map uri="setLocaleFromBrowser">
-        <security https="false" auth="false"/>
+        <security https="false" auth="true"/>
         <event type="service" invoke="setLocaleFromBrowser"/>
         <response name="success" type="request" value="json"/>
         <response name="error" type="request" value="json"/>