Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0010470Openbravo ERP00. Application dictionarypublic2009-09-03 10:172009-09-05 00:00
Reporternetworkb 
Assigned Toiciordia 
PriorityimmediateSeveritycriticalReproducibilityalways
StatusclosedResolutionno change required 
PlatformOS5OS Version
Product Version2.50MP4 
Target VersionFixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customerOBPS
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0010470: The user System of the application should be removed
DescriptionThe user System of the application should be removed. All the applications
have a user System with password System that is not known for many Partners and clients, so generally this user is not removed when starting a project,
so if some one knows that this users exists, it is possible to access to the application as system administrator.
The Openbravo user is correct because is known and the partners used to change the password of this user.
Steps To Reproduce-Login with user System and password System
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
related to defect 0010447 closed marvintm User System shouldn't be able to login, but it currently has a password 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2009-09-03 10:17networkbNew Issue
2009-09-03 10:17networkbAssigned To => rafaroda
2009-09-03 10:17networkbOBNetwork customer => Yes
2009-09-04 11:43iciordiaAssigned Torafaroda => iciordia
2009-09-04 11:46iciordiaStatusnew => closed
2009-09-04 11:46iciordiaNote Added: 0019469
2009-09-04 11:46iciordiaResolutionopen => no change required
2009-09-04 12:00rafarodaRelationship addedrelated to 0010447
2009-09-04 19:12dmitry_mezentsevRelationship addedblocks 0010399
2009-09-05 00:00anonymoussf_bug_id0 => 2851895

Notes
(0019469)
iciordia   
2009-09-04 11:46   
This is not a bug. The configuration manual (http://wiki.openbravo.com/wiki/ERP/2.50/Configuration_Manual/Getting_started#Change_default_passwords [^]) explains that defaults passwords should be modified as a first step in the process.

Additionaly, recently we did another fix (bug 10447) so user System is created by default without privilege to log in.

Ismael