Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Check access before opening Info Windows

Description

Info window can be opened within windows even is current role is not allowed to.
Steps to reproduce :
Log in GardenWorld using GardenAdmin and de-activate access to "Business Partner Info" for GardenWorld User.
Log in GardenWorld using GardenUser ; on the Views panel, there is no Business Partner Info link (which is correct). Then open any window with a C_BPartner_ID field. Click on the Search button. The Business Partner Info will open whereas GardenUser is not allowed to use it.

Regards,

Nicolas

Environment

None

Activity

Show:

Nicolas Micoud May 23, 2017 at 1:19 PM

, I will put fields in ReadOnly and it will solve the issue.
Thanks,

Nicolas

Carlos Ruiz May 23, 2017 at 1:16 PM

I think is not a bug - the info windows were the way to search before the menu info windows existed. So, I think there is a reason to allow searching when the user has access to the field.

Nicolas Micoud May 23, 2017 at 1:08 PM

Sure, result would be the same.
But in my case, i have several windows/fields to manage, and i prefer to avoid having difference inside windows for a specific role, it's harder to maintain (i already have difference between tenants - SAAS environment).
That's why i was looking for another solution, and that's how i found this bug

Carlos Ruiz May 23, 2017 at 1:00 PM

But that would make the field useless. Is not better in such case to make it read-only for that user?

Nicolas Micoud May 23, 2017 at 12:08 PM

I would say that if he is not allowed to open the info window, he is not allowed to search for records.

(same as access which are checked on process. If you can't run the process, a error popup says "you can't execute process ABC")

Won't Fix

Details

Assignee

Reporter

Priority

Created May 23, 2017 at 8:13 AM
Updated July 3, 2017 at 12:03 PM
Resolved May 23, 2017 at 1:18 PM