[Erp5-dev] Proposed security update - Movement_zGetPackedQuantity

[Łukasz Nowak]

Hello,

I think that portal_skins/erp5_trade/Movement_zGetPackedQuantity could
have role 'Authenticated' on permission Use_Database_Methods_Permission.
Without that I'm not able to create SPLs with restricted users...

Bye,
Luke

[Jérôme Perrin]

Post by Łukasz Nowak
Hello,
I think that portal_skins/erp5_trade/Movement_zGetPackedQuantity could
have role 'Authenticated' on permission Use_Database_Methods_Permission.
Without that I'm not able to create SPLs with restricted users...

Hello,
you should check your users have "Member" role.

J?rome

[Łukasz Nowak]

Hello,
(again problems with reciving mail from list...)

Post by Łukasz Nowak
Hello,
you should check your users have "Member" role.

They hadn't - I see it now. I'll have to add them Member role.

Thanks,
Luke