ofbiz-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jacques Le Roux (JIRA)" <j...@apache.org>
Subject [jira] [Closed] (OFBIZ-4106) deleteCustomerTaxAuthInfo page called from /ecommerce/control/viewprofile
Date Mon, 10 Oct 2016 20:32:20 GMT

     [ https://issues.apache.org/jira/browse/OFBIZ-4106?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Jacques Le Roux closed OFBIZ-4106.
       Resolution: Fixed
         Assignee: Jacques Le Roux
    Fix Version/s: Release Branch 13.07
                   Release Branch 14.12
                   Release Branch 15.12
                   Upcoming Branch

This had finally been fixed by removing the possibility of creating "Tax 
Identifications and Exemptions". Because users would actually need to have the  ACCOUNTING_CREATE
or ACCOUNTING_ADMIN permissions to do so (or higher admin permissions) and opening the accounting
(or total) admin right to a customer seems not secure to me.

Moreover the same exists in party and it needs admin rights in both places, so does not make
sense in ecommerce. 

Done in 
trunk r1764158+r1764176+r1764178
R15.12, R14.12, R13.07 r1764179

> deleteCustomerTaxAuthInfo page called from /ecommerce/control/viewprofile
> -------------------------------------------------------------------------
>                 Key: OFBIZ-4106
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-4106
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: specialpurpose/ecommerce
>    Affects Versions: Release 09.04
>         Environment: Linux x64 Debian AMD64
>            Reporter: MichaƂ Cukierman
>            Assignee: Jacques Le Roux
>             Fix For: Upcoming Branch, Release Branch 15.12, Release Branch 14.12, Release
Branch 13.07
>         Attachments: Zaznaczenie_001.png
> Steps to reproduce:
> 1) Login to ecommerce app
> 2) View the profile
> 3) Add some  entries uder Tax Identification and Exemption
> 4) Try to delete previously added value

This message was sent by Atlassian JIRA

View raw message