Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0011269Openbravo ERP01. General setuppublic2009-11-06 13:352009-11-10 00:00
Reportermtaal 
Assigned Tomtaal 
PriorityimmediateSeverityminorReproducibilityalways
StatusclosedResolutionduplicate 
PlatformOS5OS Version
Product Versionpi 
Target Version2.50MP10Fixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customer
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0011269: Info button gives security exception
DescriptionWhen you click the info button then a security exception is shown, when you are not in the system admin role. See this stack trace:
… 11:01:28 [http-8888-4] ERROR org.openbravo.base.exception.OBSecurityException - Entity ADSystem is not readable by the user 100
org.openbravo.base.exception.OBSecurityException: Entity ADSystem is not readable by the user 100
        at org.openbravo.dal.security.EntityAccessChecker.checkReadable(EntityAccessChecker.java:284)
        at org.openbravo.dal.service.OBDal.checkReadAccess(OBDal.java:400)
        at org.openbravo.dal.service.OBDal.checkReadAccess(OBDal.java:390)
        at org.openbravo.dal.service.OBDal.get(OBDal.java:158)
        at org.openbravo.erpCommon.obps.ActivationKey.<init>(ActivationKey.java:70)
        at org.openbravo.erpCommon.ad_forms.About.printPageDataSheet(About.java:54)
        at org.openbravo.erpCommon.ad_forms.About.doPost(About.java:43)
        at org.openbravo.base.HttpBaseServlet.doGet(HttpBaseServlet.java:286)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:689)
        at org.openbravo.base.HttpBaseServlet.serviceInitialized(HttpBaseServlet.java:224)
        at org.openbravo.base.secureApp.HttpSecureAppServlet.service(HttpSecureAppServlet.java:327)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:270)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:191)
        at org.openbravo.utils.SessionExpirationFilter.doFilter(SessionExpirationFilter.java:66)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:220)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:191)
        at org.openbravo.utils.CharsetFilter.doFilter(CharsetFilter.java:35)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:220)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:191)
        at org.openbravo.dal.core.DalRequestFilter$1.doAction(DalRequestFilter.java:79)
        at org.openbravo.dal.core.ThreadHandler.run(ThreadHandler.java:46)
        at org.openbravo.dal.core.DalRequestFilter.doFilter(DalRequestFilter.java:85)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:220)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:191)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:227)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:104)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:211)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:817)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:623)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:444)
        at java.lang.Thread.run(Thread.java:619)
Steps To Reproduce
Proposed Solutionsurround the call to reading system info in a so-called admin block
Additional Information
TagsNo tags attached.
Relationships
duplicate of defect 00103432.50MP4 closed shuehner An error is displayed when accessing Info window with an user different from System Administrator 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2009-11-06 13:35mtaalNew Issue
2009-11-06 13:35mtaalAssigned To => mtaal
2009-11-06 13:38networkbPrioritynormal => immediate
2009-11-06 13:38networkbTarget Version2.50MP9 => 2.50MP10
2009-11-09 09:40mtaalNote Added: 0021633
2009-11-09 09:47hgbotCheckin
2009-11-09 09:47hgbotNote Added: 0021634
2009-11-09 09:47hgbotStatusnew => resolved
2009-11-09 09:47hgbotResolutionopen => fixed
2009-11-09 09:47hgbotFixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/e22386187a2ed07cce31a104481cd16f6b80b24d [^]
2009-11-09 11:07mtaalStatusresolved => new
2009-11-09 11:07mtaalResolutionfixed => open
2009-11-09 11:07mtaalNote Added: 0021640
2009-11-09 11:07mtaalStatusnew => acknowledged
2009-11-09 11:07mtaalResolutionopen => duplicate
2009-11-09 11:08mtaalStatusacknowledged => scheduled
2009-11-09 11:09mtaalRelationship addedduplicate of 0010343
2009-11-09 11:09mtaalStatusscheduled => closed
2009-11-09 11:09mtaalNote Added: 0021641
2009-11-09 11:09mtaalDuplicate ID0 => 10343
2009-11-10 00:00anonymoussf_bug_id0 => 2894889

Notes
(0021633)
mtaal   
2009-11-09 09:40   
This happens when the user has a role which does not allow read access to AD_System. The fix is done by reading the AD_System information in admin mode.
I tried but I don't the current sample data roles have this.

A fix will be committed/pushed in half an hour or so.

gr. Martin
(0021634)
hgbot   
2009-11-09 09:47   
Repository: erp/devel/pi
Changeset: e22386187a2ed07cce31a104481cd16f6b80b24d
Author: Martin Taal <martin.taal <at> openbravo.com>
Date: Mon Nov 09 09:46:16 2009 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/e22386187a2ed07cce31a104481cd16f6b80b24d [^]

fixes issue 11269: Info button gives security exception

---
M src/org/openbravo/erpCommon/obps/ActivationKey.java
---
(0021640)
mtaal   
2009-11-09 11:07   
Re-opening it as this was already resolved in another issue.

gr. Martin
(0021641)
mtaal   
2009-11-09 11:09   
Duplicate of already solved issue