Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0001022Openbravo ERP00. Application dictionarypublic2007-03-12 17:292008-06-12 09:43
psarobe 
alostale 
normalminoralways
closedfixed 
5
 
 
No
Core
No
0001022: Role access. AD_Window_TRG
Whenever you develope a new window, the Trigger "AD_Window_TRG" that is on the table "AD_Window" gives you access to all the roles that exist in the aplication.

The part of the code is :

INTO AD_Window_Access
    (
      AD_Window_ID, AD_Role_ID, AD_Client_ID,
      AD_Org_ID, IsActive, Created,
      CreatedBy, Updated, UpdatedBy,
      IsReadWrite
    )
  SELECT DISTINCT :new.AD_Window_ID,
    r.AD_Role_ID, r.AD_CLIENT_ID, r.AD_ORG_ID,
     'Y', SysDate, 0,
    SysDate, 0, 'Y'
  FROM AD_Role r;

This is wrong because you may develope the new window just for an especific role (Sales department) and suddenly all the roles can see it.

Now you have to go throw all the roles and delete the access.
No tags attached.
Issue History

Notes
(0004611)
user71   
2005-06-01 00:00   
(edited on: 2008-06-12 09:43)
This bug was originally reported in SourceForge bug tracker and then migrated to Mantis.

You can see the original bug report in:
https://sourceforge.net/support/tracker.php?aid=1679119 [^]
(0000852)
alostale   
2007-03-13 09:06   
(edited on: 2008-06-12 09:18)
Logged In: YES
user_id=1500722
Originator: NO

When a window is created access will be granted only to those roles that are defined as manual='N' instead of to every one. When "manual" field is checked means that access to that role will be manually given if it is not it will be automatically given.

In addition to windows I've modified to have the same behavior:
form
process
workflow

--

fixed on r2.30