Article Details
Id: | 9725 |
Product: | finPOWER Connect |
Type: | FIX |
Version: | 1.04.05 |
Opened: | 24/02/2012 |
Closed: | 27/02/2012 |
Released: | 02/03/2012 |
Job: | J009075 |
Account Refunds and Transfers; you can Cancel "Override User credentials" and still continue
The "Override User credentials" in Account Refunds and Transfers can be cancelled and this incorrectly allows the wizard to continue.
To recreate:
1. Login with a User denied permission key "Account.Withdrawal.OverCreditLimit" - default is deny, so basically a user that isn't an Administrator.
2. Go to Transactions, Account Refund wizard.
3. Select an Account where the Credit Limit is exceeded and enter details.
4. Click Next.
5. Warns Credit Limit exceeded, click to override.
6. Override User Credentials dialog, click Cancel.
This allows wizard to continue. Note, the Business Layer allows this to proceed - this permission key is a User Interface only permission