Description
A new user was created and granted the following permissions:
- OFBTOOLS_VIEW
- FACILITY_VIEW
- FACILITY_UPDATE
- FACILITY_CREATE
- CATALOG_VIEW
User can navigate to the Catalog webapp and can select a product, e.g. https://demo-next.ofbiz.apache.org/catalog/control/EditProduct?productId=WG-9943
User then clicks on the Facilities button, enters details for a facility and clicks the Add button.
The following error is displayed:
You haven't the permission for the service createProductFacility, reason : Access refused
The createProductFacility service uses permission-service,
checkProductFacilityRelatedPermission. This permission-service request permission checking via another service, checkProductRelatedPermission, passing FACILITY as an alternative permission root.
This alternative permission route is the reason why the user's current set of permissions are expected to allow the createProductFacility service to run.
Attachments
Issue Links
- links to