svn commit: r696569 - /ofbiz/trunk/specialpurpose/mypage/script/org/ofbiz/mypage/MyPageServices.xml

[hansbak-2]

Author: hansbak
Date: Wed Sep 17 23:16:16 2008
New Revision: 696569

URL: http://svn.apache.org/viewvc?rev=696569&view=rev
Log:
use system userlogin to avoid security problems

Modified:
    ofbiz/trunk/specialpurpose/mypage/script/org/ofbiz/mypage/MyPageServices.xml

Modified: ofbiz/trunk/specialpurpose/mypage/script/org/ofbiz/mypage/MyPageServices.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/specialpurpose/mypage/script/org/ofbiz/mypage/MyPageServices.xml?rev=696569&r1=696568&r2=696569&view=diff
==============================================================================
--- ofbiz/trunk/specialpurpose/mypage/script/org/ofbiz/mypage/MyPageServices.xml (original)
+++ ofbiz/trunk/specialpurpose/mypage/script/org/ofbiz/mypage/MyPageServices.xml Wed Sep 17 23:16:16 2008
@@ -42,9 +42,13 @@
                     <if-empty field="userPref.userPrefValue">
                         <!-- set send customer requst email field to default-->
                         <set field="setUserPref.userPrefMap.sendCustRequestEmail" value="Y"/>
-                        <set field="setUserPref.userLoginId" from-field="partyUserLogin.userLoginId"/>
+                        <entity-one entity-name="UserLogin" value-name="userLogin">
+                            <field-map field-name="userLoginId" value="system"/>
+                        </entity-one>
+                        <set field="setUserPref.userLoginId" from-field="userLogin.userLoginId"/>
+                        <set field="setUserPref.userLogin" from-field="userLogin"/>
                         <set field="setUserPref.userPrefGroupId" value="MyPage"/>
-                        <call-service service-name="setUserPreferenceGroup" in-map-name="setUserPref"/>
+                        <call-service service-name="setUserPreferenceGroup" in-map-name="setUserPref" include-user-login="false"/>
                     </if-empty>
                     <!-- if customer want to send email notification when customer request completed then send email-->
                     <if>