svn commit: r1858539 - /ofbiz/ofbiz-framework/trunk/applications/content/servicedef/services.xml

[jacopoc]

Author: jacopoc
Date: Thu May  2 13:41:24 2019
New Revision: 1858539

URL: http://svn.apache.org/viewvc?rev=1858539&view=rev
Log:
Improved: Replaced permission-service with required-permissions in order to
perform permission checks in a way that is more consistent with the screen
permissions set in the ecommerce blog/forum screens.


Modified:
    ofbiz/ofbiz-framework/trunk/applications/content/servicedef/services.xml

Modified: ofbiz/ofbiz-framework/trunk/applications/content/servicedef/services.xml
URL: http://svn.apache.org/viewvc/ofbiz/ofbiz-framework/trunk/applications/content/servicedef/services.xml?rev=1858539&r1=1858538&r2=1858539&view=diff
==============================================================================
--- ofbiz/ofbiz-framework/trunk/applications/content/servicedef/services.xml (original)
+++ ofbiz/ofbiz-framework/trunk/applications/content/servicedef/services.xml Thu May  2 13:41:24 2019
@@ -478,7 +478,9 @@
     <service name="createArticleContent" engine="simple" transaction-timeout="300" auth="true"
             location="component://content/minilang/content/ContentServices.xml" invoke="createArticleContent">
         <description>Creates content records for a blog entry</description>
-        <permission-service service-name="genericContentPermission" main-action="CREATE"/>
+        <required-permissions join-type="AND">
+            <check-permission permission="CONTENTMGR" action="_CREATE"/>
+        </required-permissions>
         <implements service="createContentFromUploadedFile" optional="true"/>
         <implements service="createTextContent" optional="true"/>
         <attribute name="contentIdFrom" type="String" mode="IN" optional="false">
@@ -1081,7 +1083,9 @@
     <service name="createBlogEntry" engine="simple" auth="true"
         location="component://content/minilang/blog/BlogServices.xml" invoke="createBlogEntry">
         <description>Creates content records for a blog entry</description>
-        <permission-service service-name="genericContentPermission" main-action="CREATE"/>
+        <required-permissions join-type="AND">
+            <check-permission permission="CONTENTMGR" action="_CREATE"/>
+        </required-permissions>
         <implements service="uploadFileInterface" optional="true"/>
         <attribute name="blogContentId" type="String" mode="INOUT" optional="false">
             <type-validate>
@@ -1099,7 +1103,9 @@
     <service name="updateBlogEntry" engine="simple" auth="true"
         location="component://content/minilang/blog/BlogServices.xml" invoke="updateBlogEntry">
         <description>Updates content records for a blog entry</description>
-        <permission-service service-name="genericContentPermission" main-action="CREATE"/>
+        <required-permissions join-type="AND">
+            <check-permission permission="CONTENTMGR" action="_UPDATE"/>
+        </required-permissions>
         <implements service="uploadFileInterface" optional="true"/>
         <attribute name="blogContentId" type="String" mode="INOUT" optional="false">
             <type-validate>