Steps to replicate -
1. Make sure there are pending inbound emails.
2. These emails shows up in the "Pending inbound emails" in CRMSFA homepage.
3. Attempting to delete this email results in error as shown -
The Following Errors Occurred:
Error calling event: org.ofbiz.webapp.event.EventHandlerException: URL parameter [workEffortId] cannot be passed to secure (https) request-map with uri [deleteActivityEmail] to call service [crmsfa.deleteActivityEmail]. This is not allowed for security reasons.
This is due to http://www.opentaps.org/docs/index.php/Opentaps_1.0_to_1.4_Technical_Upgrade_Notes#URL_Parameter_Security
Though this is similar to https://sourceforge.net/tracker/?func=detail&aid=3310147&group_id=145855&atid=763271, it requires a different fix & approach as the entire section is under a form and forms cannot be nested.