Menu

#211 CRMSFA search results screen out non-viewable

open
nobody
crmsfa (63)
5
2007-11-22
2007-11-22
Si Chen
No

CRMSFA find account/lead/contact/partner should filter out results which the user does not have view privilege for. This can be done by:

1. findCrmsfaParties.bsh has a build newPageRow routine which should call a new PartyHelper.hasViewPermission(partyId, userLogin, delegator) method

2. hasViewPermission should do the following:
(a) getFirstValidRole for this partyId
(b) PartyHelper should have a new rolePermissionModule Map of {CONTACT->CONTACT, PROSPECT->LEAD, ACCOUNT->ACCOUNT, etc.}
(c) It should use CrmsfaSecurity to check permission for the CRMSFA module plus _VIEW permission, with the module obtained from the Map in (b).

Unit tests should go into SecurityTests.java

Discussion


Log in to post a comment.

MongoDB Logo MongoDB