When missing POD_MANAGE or ORDERS_VIEW right, user was not able to open View Orders page.
It was possible only if user had two rights despite the fact that only one of those two is required.
user with POD_MANAGE only has access
user with ORDERS_VIEW only has access
user with both has access
user without any doesn't have access
I tested the ticket, and users with suitable roles can access the "View Orders" page, and those who shouldn't, can't. I noticed two issues:
1. The changelog concerning the ticket is missing.
2. Users with the Warehouse Clerk role can't see the "Manage PODs" option after clicking on "Orders" in the top menu, only the "View Orders" option is visible. It should not be so, as they have both rights: POD_MANAGE and ORDERS_VIEW. In contrast, Delivery Approvers with only the POD_MANAGE right can see both options in the menu - "View Orders" and "Manage PODs". The issue might be related to the ticket.
1. changelog was added by .
2. In order to see "Manage PODs" in navigation user needs two rights: REQUISITION_CREATE and PODS_MANAGE, not POD_MANAGE and ORDERS_VIEW. So if user doesn't have both rights, he cannot see it. Does that answer your question?
I didn't know that, thanks. Now everything's clear. I made a re-test, and everything works correctly.