From 94169c0af4efa864156844b497aff99036bcec35 Mon Sep 17 00:00:00 2001
From: Carlos Ruiz <carg67@gmail.com>
Date: Thu, 30 Apr 2020 16:01:49 +0200
Subject: [PATCH] IDEMPIERE-4260 Web Services : Query should use
 MRole.addAccessSQL with RO (#20)

Co-authored-by: Nicolas Micoud <nmicoud@tgi.fr>
---
 .../src/org/idempiere/adinterface/ModelADServiceImpl.java       | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/org.idempiere.webservices/WEB-INF/src/org/idempiere/adinterface/ModelADServiceImpl.java b/org.idempiere.webservices/WEB-INF/src/org/idempiere/adinterface/ModelADServiceImpl.java
index f85ea2ba22..d0064b5d5c 100644
--- a/org.idempiere.webservices/WEB-INF/src/org/idempiere/adinterface/ModelADServiceImpl.java
+++ b/org.idempiere.webservices/WEB-INF/src/org/idempiere/adinterface/ModelADServiceImpl.java
@@ -1456,7 +1456,7 @@ public class ModelADServiceImpl extends AbstractService implements ModelADServic
 			if (manageTrx)
 				trx.setDisplayName(getClass().getName()+"_"+webServiceName+"_queryData");
 			
-	    	StringBuilder sqlBuilder = new StringBuilder(role.addAccessSQL("SELECT * FROM " + tableName, tableName, true, true));
+	    	StringBuilder sqlBuilder = new StringBuilder(role.addAccessSQL("SELECT * FROM " + tableName, tableName, true, MRole.SQL_RO));
 			
 			ArrayList<Object> sqlParaList = new ArrayList<Object>();
 			PO holderPo = table.getPO(0, trxName);