Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
Upcoming Branch
-
None
-
None
Description
When accessing https://demo-trunk.ofbiz.apache.org/partymgr/control/FindSecurityGroup as a user with only VIEW permissions (e.g. userId = auditor) the action trigger to create something is shown.
This should not be visible to such a user as it leads to an undesired effect and diminished user experience.