Skip to content

Fixes RM-14012: extra acess required when return full object is enabled on...

Eugen Hamuraru requested to merge openbravo/devel/openbravo:fix/55517_ws_access into master

On a POST endpoint with synchronous execution enabled and return object mapping configured.

When trying to consume these endpoints with a manual role some extra accesses are required:

  • Read access to tables API_Export_Filter and OBEI_Entity_Mapping
  • Restrict Backend Access has to be disabled.
  • Access to a window where the object created by the api can be viewed.

By default only Giftcards allows sync execution and this endpoint does not require access to API_Export_Filter. Enabling the sync execution on other endpoints like business partner, coupons or suscriptions require the access to that table.

Merge request reports