From 521154d2ef63a3737daa2d903172e5e90f0a78fc Mon Sep 17 00:00:00 2001 From: drorsouhami Date: Thu, 26 Mar 2026 17:23:36 +0200 Subject: [PATCH 1/3] AV-472: Partner -29 permissions for entryVendorTask service --- .../permissions/service.reach.entryVendorTask.ini | 4 ++-- .../2026_03_26_entryvendortask_-29_permission.php | 10 ++++++++++ release-notes.md | 9 +++++++++ 3 files changed, 21 insertions(+), 2 deletions(-) create mode 100644 deployment/updates/scripts/add_permissions/2026_03_26_entryvendortask_-29_permission.php diff --git a/deployment/permissions/service.reach.entryVendorTask.ini b/deployment/permissions/service.reach.entryVendorTask.ini index 66623d594d6..8c2892b8bdf 100644 --- a/deployment/permissions/service.reach.entryVendorTask.ini +++ b/deployment/permissions/service.reach.entryVendorTask.ini @@ -7,7 +7,7 @@ permissionItem1.param3 = permissionItem1.param4 = permissionItem1.param5 = permissionItem1.tags = -permissionItem1.permissions = BASE_USER_SESSION_PERMISSION +permissionItem1.permissions = BASE_USER_SESSION_PERMISSION, -29>PARTNER_-29_GROUP_*_PERMISSION permissionItem2.service = reach_entryvendortask permissionItem2.action = get @@ -44,7 +44,7 @@ permissionItem5.param3 = permissionItem5.param4 = permissionItem5.param5 = permissionItem5.tags = -permissionItem5.permissions = BASE_USER_SESSION_PERMISSION, -1>PARTNER_-1_GROUP_*_PERMISSION, -2>PARTNER_-2_GROUP_*_PERMISSION +permissionItem5.permissions = BASE_USER_SESSION_PERMISSION, -1>PARTNER_-1_GROUP_*_PERMISSION, -2>PARTNER_-2_GROUP_*_PERMISSION, -29>PARTNER_-29_GROUP_*_PERMISSION permissionItem6.service = reach_entryvendortask permissionItem6.action = approve diff --git a/deployment/updates/scripts/add_permissions/2026_03_26_entryvendortask_-29_permission.php b/deployment/updates/scripts/add_permissions/2026_03_26_entryvendortask_-29_permission.php new file mode 100644 index 00000000000..4ea434f7eac --- /dev/null +++ b/deployment/updates/scripts/add_permissions/2026_03_26_entryvendortask_-29_permission.php @@ -0,0 +1,10 @@ + Date: Mon, 30 Mar 2026 09:39:22 +0300 Subject: [PATCH 2/3] AV-472: Allow partner -29 to impersonate --- deployment/permissions/service.session.ini | 2 +- .../2026_03_26_entryvendortask_-29_permission.php | 7 ++++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/deployment/permissions/service.session.ini b/deployment/permissions/service.session.ini index ed035e10454..be9452476ae 100644 --- a/deployment/permissions/service.session.ini +++ b/deployment/permissions/service.session.ini @@ -24,7 +24,7 @@ permissionItem3.param3 = permissionItem3.param4 = permissionItem3.param5 = permissionItem3.tags = -permissionItem3.permissions = ALWAYS_ALLOWED_ACTIONS, -2>PARTNER_-2_GROUP_*_PERMISSION, BASE_USER_SESSION_PERMISSION, WIDGET_SESSION_PERMISSION, -2>SYSTEM_ADMIN_BASE, -11>PARTNER_-11_GROUP_*_PERMISSION, -13>PARTNER_-13_GROUP_*_PERMISSION, -14>PARTNER_-14_GROUP_*_PERMISSION, -16>PARTNER_-16_GROUP_*_PERMISSION, -17>PARTNER_-17_GROUP_*_PERMISSION, -18>PARTNER_-18_GROUP_*_PERMISSION, -19>PARTNER_-19_GROUP_*_PERMISSION, -20>PARTNER_-20_GROUP_*_PERMISSION, -21>PARTNER_-21_GROUP_*_PERMISSION, -22>PARTNER_-22_GROUP_*_PERMISSION, -23>PARTNER_-23_GROUP_*_PERMISSION, -24>PARTNER_-24_GROUP_*_PERMISSION, -25>PARTNER_-25_GROUP_*_PERMISSION, -27>PARTNER_-27_GROUP_*_PERMISSION, -28>PARTNER_-28_GROUP_*_PERMISSION +permissionItem3.permissions = ALWAYS_ALLOWED_ACTIONS, -2>PARTNER_-2_GROUP_*_PERMISSION, BASE_USER_SESSION_PERMISSION, WIDGET_SESSION_PERMISSION, -2>SYSTEM_ADMIN_BASE, -11>PARTNER_-11_GROUP_*_PERMISSION, -13>PARTNER_-13_GROUP_*_PERMISSION, -14>PARTNER_-14_GROUP_*_PERMISSION, -16>PARTNER_-16_GROUP_*_PERMISSION, -17>PARTNER_-17_GROUP_*_PERMISSION, -18>PARTNER_-18_GROUP_*_PERMISSION, -19>PARTNER_-19_GROUP_*_PERMISSION, -20>PARTNER_-20_GROUP_*_PERMISSION, -21>PARTNER_-21_GROUP_*_PERMISSION, -22>PARTNER_-22_GROUP_*_PERMISSION, -23>PARTNER_-23_GROUP_*_PERMISSION, -24>PARTNER_-24_GROUP_*_PERMISSION, -25>PARTNER_-25_GROUP_*_PERMISSION, -27>PARTNER_-27_GROUP_*_PERMISSION, -28>PARTNER_-28_GROUP_*_PERMISSION, -29>PARTNER_-28_GROUP_*_PERMISSION permissionItem4.service = session permissionItem4.action = impersonatebyks diff --git a/deployment/updates/scripts/add_permissions/2026_03_26_entryvendortask_-29_permission.php b/deployment/updates/scripts/add_permissions/2026_03_26_entryvendortask_-29_permission.php index 4ea434f7eac..c3aedae88ea 100644 --- a/deployment/updates/scripts/add_permissions/2026_03_26_entryvendortask_-29_permission.php +++ b/deployment/updates/scripts/add_permissions/2026_03_26_entryvendortask_-29_permission.php @@ -1,10 +1,15 @@ Date: Mon, 30 Mar 2026 12:55:54 +0300 Subject: [PATCH 3/3] AV-472: Impersonate permission --- deployment/permissions/service.session.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deployment/permissions/service.session.ini b/deployment/permissions/service.session.ini index be9452476ae..1e37dbc46ea 100644 --- a/deployment/permissions/service.session.ini +++ b/deployment/permissions/service.session.ini @@ -24,7 +24,7 @@ permissionItem3.param3 = permissionItem3.param4 = permissionItem3.param5 = permissionItem3.tags = -permissionItem3.permissions = ALWAYS_ALLOWED_ACTIONS, -2>PARTNER_-2_GROUP_*_PERMISSION, BASE_USER_SESSION_PERMISSION, WIDGET_SESSION_PERMISSION, -2>SYSTEM_ADMIN_BASE, -11>PARTNER_-11_GROUP_*_PERMISSION, -13>PARTNER_-13_GROUP_*_PERMISSION, -14>PARTNER_-14_GROUP_*_PERMISSION, -16>PARTNER_-16_GROUP_*_PERMISSION, -17>PARTNER_-17_GROUP_*_PERMISSION, -18>PARTNER_-18_GROUP_*_PERMISSION, -19>PARTNER_-19_GROUP_*_PERMISSION, -20>PARTNER_-20_GROUP_*_PERMISSION, -21>PARTNER_-21_GROUP_*_PERMISSION, -22>PARTNER_-22_GROUP_*_PERMISSION, -23>PARTNER_-23_GROUP_*_PERMISSION, -24>PARTNER_-24_GROUP_*_PERMISSION, -25>PARTNER_-25_GROUP_*_PERMISSION, -27>PARTNER_-27_GROUP_*_PERMISSION, -28>PARTNER_-28_GROUP_*_PERMISSION, -29>PARTNER_-28_GROUP_*_PERMISSION +permissionItem3.permissions = ALWAYS_ALLOWED_ACTIONS, -2>PARTNER_-2_GROUP_*_PERMISSION, BASE_USER_SESSION_PERMISSION, WIDGET_SESSION_PERMISSION, -2>SYSTEM_ADMIN_BASE, -11>PARTNER_-11_GROUP_*_PERMISSION, -13>PARTNER_-13_GROUP_*_PERMISSION, -14>PARTNER_-14_GROUP_*_PERMISSION, -16>PARTNER_-16_GROUP_*_PERMISSION, -17>PARTNER_-17_GROUP_*_PERMISSION, -18>PARTNER_-18_GROUP_*_PERMISSION, -19>PARTNER_-19_GROUP_*_PERMISSION, -20>PARTNER_-20_GROUP_*_PERMISSION, -21>PARTNER_-21_GROUP_*_PERMISSION, -22>PARTNER_-22_GROUP_*_PERMISSION, -23>PARTNER_-23_GROUP_*_PERMISSION, -24>PARTNER_-24_GROUP_*_PERMISSION, -25>PARTNER_-25_GROUP_*_PERMISSION, -27>PARTNER_-27_GROUP_*_PERMISSION, -28>PARTNER_-28_GROUP_*_PERMISSION, -29>PARTNER_-29_GROUP_*_PERMISSION permissionItem4.service = session permissionItem4.action = impersonatebyks