Project:
| View Revisions: Issue #34676 | [ Back to Issue ] | ||
| Summary | 0034676: It is possible to see prices for list prices for organizations that you don't have access to. | ||
| Revision | 2016-12-20 12:49 by egoitz | ||
| Steps To Reproduce | Using the F&B sample data. 1-Create a new role. Org=* Access level=Organization Org access: REmove all the rows except: España REgion Sur Window Access: Sales Order. Editable field=Y. 2-Crea a new user. Org=* User Roles: the previously created role. 3-Create a priceslit: Organization: España Norte Sales priceslit =Y Create a priceslit version and create the product prices using on the base version "Tarifa de ventas". 3-Create a priceslit: Organization: España Surt Sales priceslit =Y Create a priceslit version and create the product prices using on the base version "Tarifa de ventas". 4-Logout 5-Login with the new user. 6-Create a sales order. Organization = region sur. 7-Create a line. Open the product selector popup. 8-REmove the filters. *See on the prices list version column that you see rows for norte prices list also. |
||
| Revision | 2016-12-20 12:49 by egoitz | ||
| Description | When using the product selector it is possible to see the price of pricelist that belongs to an organization that the role used does not access to. | ||
| Revision | 2016-12-07 09:21 by egoitz | ||
| Steps To Reproduce | 1) As F&B International Group Admin role: 1.1) Open [Role] window and edit "F&BESRSUser" role: - Delete every organization access except "F&B España - Región Sur" (Tab Org Access) - Assign this role to user Openbravo (Tab User Assignment) 1.2) Open [Price List] window: - Create a new price list (be sure you check on the "Sales Price List" checkbox) - Create a new record on "Price List Version" tab, named "Region Norte" and let the default values. - Create a new record on "Product Price" subtab and choose some product and add a price. 2) As F&BESRSUser role (the role previously assigned to Openbravo user): 2.1) Open [Sales Order] window and create a new record for "Alimentos y Supermercados" business partner. - Create a new line and open the pick and execute window for product (the lens icon) - Finally, delete the filters (the funnel icon). --> The price list for "Region Norte" appears |
||
| Revision | 2016-12-07 09:21 by egoitz | ||
| Description | A defined role for a particular organization should not have access to price lists of the rest of organizations above it. For example, if we define a role with only access to "F&B España - Región Sur", we should not see the price lists defined for "F&B España - Región Norte". However, if we delete the default filters, the price lists appears. | ||
| Copyright © 2000 - 2009 MantisBT Group |
 |