Openbravo Issue Tracking System - Openbravo ERP |
| View Issue Details |
|
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0012256 | Openbravo ERP | A. Platform | public | 2010-02-14 12:38 | 2022-02-01 08:08 |
|
| Reporter | iciordia | |
| Assigned To | Triage Platform Base | |
| Priority | high | Severity | minor | Reproducibility | always |
| Status | acknowledged | Resolution | open | |
| Platform | | OS | 5 | OS Version | any |
| Product Version | pi | |
| Target Version | | Fixed in Version | | |
| Merge Request Status | |
| Review Assigned To | |
| OBNetwork customer | No |
| Web browser | |
| Modules | Core |
| Support ticket | |
| Regression level | |
| Regression date | |
| Regression introduced in release | |
| Regression introduced by commit | |
| Triggers an Emergency Pack | No |
|
| Summary | 0012256: It is possible to modify others module's (including core) metadata through System datasets in your module |
| Description | If you include a System dataset in your module in which some core components are modified, when applying your module those core components will be modified, and this way there is a security breach in the rule "modules can not modify other modueles" |
| Steps To Reproduce | |
| Proposed Solution | Not clear, maybe raise an error when importing data if it happens... |
| Additional Information | |
| Tags | No tags attached. |
| Relationships | |
| Attached Files | |
|
| Issue History |
| Date Modified | Username | Field | Change |
| 2010-02-14 12:38 | iciordia | New Issue | |
| 2010-02-14 12:38 | iciordia | Assigned To | => alostale |
| 2010-02-14 12:38 | iciordia | OBNetwork customer | => No |
| 2010-02-15 15:30 | alostale | Status | new => scheduled |
| 2010-02-15 15:30 | alostale | fix_in_branch | => pi |
| 2011-10-28 20:23 | iciordia | Type | defect => design defect |
| 2011-10-28 20:23 | iciordia | fix_in_branch | pi => |
| 2012-09-24 23:38 | AugustoMauch | Note Added: 0052506 | |
| 2012-09-24 23:38 | AugustoMauch | Priority | urgent => high |
| 2017-03-31 14:36 | alostale | Status | scheduled => acknowledged |
| 2017-04-10 14:35 | alostale | Assigned To | alostale => platform |
| 2022-02-01 08:08 | alostale | Assigned To | platform => Triage Platform Base |