Re: Party Notes Potential Security Hole

Posted by Jacques Le Roux on
URL: http://ofbiz.116.s1.nabble.com/Party-Notes-Potential-Security-Hole-tp3170013p3170019.html

I vaguely remember someone has changed something with notes recently (Hans, Anil?). To allow creating a note not only by the current
logged in user, but I could be wrong because I can't find anything related...

Jacques

From: "Adrian Crum" <[hidden email]>
>I might have missed something, but it appears to me there is no permission checking done when creating a party note. Is there a
>reason for that?
>
> -Adrian