Openbravo Issue Tracking System - Openbravo ERP |
| View Issue Details |
|
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0011346 | Openbravo ERP | 00. Application dictionary | public | 2009-11-13 08:54 | 2009-11-18 00:00 |
|
| Reporter | networkb | |
| Assigned To | alostale | |
| Priority | immediate | Severity | minor | Reproducibility | always |
| Status | closed | Resolution | fixed | |
| Platform | | OS | 5 | OS Version | |
| Product Version | 2.50MP8 | |
| Target Version | 2.50MP11 | Fixed in Version | 2.50MP9 | |
| Merge Request Status | |
| Review Assigned To | |
| OBNetwork customer | |
| Web browser | |
| Modules | Core |
| Support ticket | |
| Regression level | |
| Regression date | |
| Regression introduced in release | |
| Regression introduced by commit | |
| Triggers an Emergency Pack | No |
|
| Summary | 0011346: The information module on the left menu of openbravo is not managed with role permissions |
| Description | The information module on the left menu of openbravo is not managed with role permissions.
The info module is showed, and using this a user is able to see
many information that shouldn't.
And you are not able to hidde this module |
| Steps To Reproduce | -Create a new role, and assing only permission to sales window
-Create a new user and assing to the new role.
-Access to the application with the new role and see that you
have access to the information module. |
| Proposed Solution | |
| Additional Information | |
| Tags | No tags attached. |
| Relationships | |
| Attached Files | |
|
| Issue History |
| Date Modified | Username | Field | Change |
| 2009-11-13 08:54 | networkb | New Issue | |
| 2009-11-13 08:54 | networkb | Assigned To | => rafaroda |
| 2009-11-13 10:54 | networkb | Target Version | => 2.50MP11 |
| 2009-11-16 11:17 | rafaroda | Note Added: 0021843 | |
| 2009-11-16 11:17 | rafaroda | Status | new => feedback |
| 2009-11-16 15:34 | networkb | Note Added: 0021860 | |
| 2009-11-16 15:34 | networkb | Status | feedback => new |
| 2009-11-16 15:58 | rafaroda | Note Added: 0021868 | |
| 2009-11-16 15:58 | rafaroda | Assigned To | rafaroda => alostale |
| 2009-11-16 17:10 | hgbot | Checkin | |
| 2009-11-16 17:10 | hgbot | Note Added: 0021875 | |
| 2009-11-16 17:10 | hgbot | Status | new => resolved |
| 2009-11-16 17:10 | hgbot | Resolution | open => fixed |
| 2009-11-16 17:10 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/26e5f0fbdfd8366ff4d395c1484b084bfcbc914c [^] |
| 2009-11-17 05:27 | sureshbabu | Note Added: 0021890 | |
| 2009-11-17 05:27 | sureshbabu | Status | resolved => closed |
| 2009-11-17 05:27 | sureshbabu | Fixed in Version | => 2.50MP9 |
| 2009-11-18 00:00 | anonymous | sf_bug_id | 0 => 2899465 |
|
Notes |
|
|
|
|
Information module will display the selectors present in the sales window. Is this the case? If not, it is an issue. If it is the case, this is not an issue but the regular behaviour. |
|
|
|
|
|
If the user has not permission to write in the sales management, this user shouldn't be able to show any contain of the filters, because why you want it the user only to see the information saved on the sales module, but not the partners, products or other elements of the application |
|
|
|
|
Asier,
Can you please comment on this issue?
Thanks. |
|
|
|
(0021875)
|
|
hgbot
|
|
2009-11-16 17:10
|
|
Repository: erp/devel/pi
Changeset: 26e5f0fbdfd8366ff4d395c1484b084bfcbc914c
Author: Asier Lostalé <asier.lostale <at> openbravo.com>
Date: Mon Nov 16 17:09:54 2009 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/26e5f0fbdfd8366ff4d395c1484b084bfcbc914c [^]
fixed bug 11346: The information module on the left menu of openbravo is not managed with role permissions
---
M src/org/openbravo/erpCommon/utility/Access_data.xsql
---
|
|
|
|
|
|
Tested, working fine (Information menu rightly appears based on the role) |
|