<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hello team<br>
We working with ABCD 1.4 and are in the process of defining new
profiles for our installation.<br>
We have defined limited roles (e.g. "read-only" and
"Update_records_only". In order to give these roles an option to
print/report we have marked option "Print Records".<br>
The roles have explicitly NO option for CENTRAL_EDPFT or similar as
this allows also saving and overwriting of pft files.<br>
<br>
Unfortunately this option shows an empty screen if a Preview is
requested<br>
See attached screenshot for the contents of the dialog presented by
Print.<br>
<br>
I have tracked this down to code in
.../www/htdocs/central/dbadmin/pft.php, javascript function
EnviarForma.<br>
This code has an undefined variable in this context which causes
javascript to raise a TypeError exception and terminate the preview.<br>
Note: this exception is not raised if CENTRAL_EDPFT or similar is
present: most administrators have no problems.<br>
<br>
More options to remove this undesired situation exist.<br>
One of them is the replacement of function EnviarForma in pft.php.<br>
See second attachment.<br>
Another solution: split the CENTRAL_EDPFT and add a new
CENTRAL_SAVPFT persmission): better, but beyond my capabilities<br>
<br>
My request is to add this or similar code to new versions of ABCD in
order to prevent that read-only users can modify anything in the
database definition files.<br>
Comments are also welcome.<br>
<p class="fragmentcodeofoutput">Thanks and regards</p>
Fred Hommersom
</body>
</html>