Openbravo Issue Tracking System - Openbravo ERP |
View Issue Details |
|
ID | Project | Category | View Status | Date Submitted | Last Update |
0012959 | Openbravo ERP | 01. General setup | public | 2010-04-13 20:29 | 2010-04-19 21:13 |
|
Reporter | networkb | |
Assigned To | adrianromero | |
Priority | immediate | Severity | major | Reproducibility | always |
Status | closed | Resolution | fixed | |
Platform | | OS | 30 | OS Version | |
Product Version | 2.50MP13 | |
Target Version | | Fixed in Version | 2.50MP15 | |
Merge Request Status | |
Review Assigned To | |
OBNetwork customer | |
Web browser | |
Modules | Core |
Support ticket | |
Regression level | |
Regression date | |
Regression introduced in release | |
Regression introduced by commit | |
Triggers an Emergency Pack | No |
|
Summary | 0012959: You can give the Systemadministrator orgaccess to an organization other than '*' |
Description | You can give the Systemadministrator orgaccess to an organization other than '*'. After that, if your role by default for Openbravo user is System administrator you can't log in in the application again with Openbravo User. |
Steps To Reproduce | Log in as Openbravo Admin.
Go to General Setup || Security || Role Access >> Select System admin role and go to tab "Org Access"
Create a new record for any organization (not *)
log out
log in as Openbravo
Notice that is not possible to log in. |
Proposed Solution | |
Additional Information | |
Tags | No tags attached. |
Relationships | |
Attached Files | |
|
Issue History |
Date Modified | Username | Field | Change |
2010-04-13 20:29 | networkb | New Issue | |
2010-04-13 20:29 | networkb | Assigned To | => adrianromero |
2010-04-14 12:44 | hgbot | Checkin | |
2010-04-14 12:44 | hgbot | Note Added: 0026173 | |
2010-04-14 12:44 | hgbot | Status | new => resolved |
2010-04-14 12:44 | hgbot | Resolution | open => fixed |
2010-04-14 12:44 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/f6069809175eb0435f931d12ec46cd7699358af9 [^] |
2010-04-14 13:14 | adrianromero | Note Added: 0026178 | |
2010-04-14 16:31 | hgbot | Checkin | |
2010-04-14 16:31 | hgbot | Note Added: 0026196 | |
2010-04-14 16:31 | hgbot | Fixed in SCM revision | http://code.openbravo.com/erp/devel/pi/rev/f6069809175eb0435f931d12ec46cd7699358af9 [^] => http://code.openbravo.com/erp/devel/pi/rev/9c230b478c15aad7893d09e4e80c3f98f54bce74 [^] |
2010-04-15 17:26 | psarobe | Note Added: 0026285 | |
2010-04-15 17:26 | psarobe | Status | resolved => closed |
2010-04-15 17:26 | psarobe | Fixed in Version | => 2.50MP15 |
2010-04-16 00:00 | anonymous | sf_bug_id | 0 => 2987983 |
2010-04-19 21:13 | hudsonbot | Checkin | |
2010-04-19 21:13 | hudsonbot | Note Added: 0026473 | |
2010-04-19 21:13 | hudsonbot | Checkin | |
2010-04-19 21:13 | hudsonbot | Note Added: 0026477 | |
Notes |
|
(0026173)
|
hgbot
|
2010-04-14 12:44
|
|
Repository: erp/devel/pi
Changeset: f6069809175eb0435f931d12ec46cd7699358af9
Author: Adrián Romero <adrianromero <at> openbravo.com>
Date: Wed Apr 14 12:57:46 2010 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/f6069809175eb0435f931d12ec46cd7699358af9 [^]
Fixes issue 0012959: You can give the Systemadministrator orgaccess to an organization other than *
---
M src-db/database/sourcedata/AD_MESSAGE.xml
A src-db/database/model/triggers/AD_ROLE_CHECK_TRG.xml
A src-db/database/model/triggers/AD_ROLE_ORGACCESS_CHECK_TRG.xml
---
|
|
|
|
* Testing of the issue:
To test the issue, as Openbravo Admin, create a new role with user level "System" or use the current "System administrator" role. Go to the tab "Org access" and try to create a new record with an organization different thant the super-organization "*". An error message will appear preventing this operation.
* Explanation of the changeset that fixes the issue:
The changeset that fix this issue consist in two triggers one that prevents to insert new registers in the AD_ROLE_ORGACCESS table for system roles with an organization different than "*" and other trigger in the AD_ROLE table that prevents to change the user level to "System" if the role as assigned organizations different than *. The changeset also includes the message shown in the trigger.
* Other areas affected by the changeset:
The only areas affected by this change set are when trying to insert or modify in the tables AD_ROLE and AD_ROLE_ORGACCESS. And affected windows has been tested. |
|
|
(0026196)
|
hgbot
|
2010-04-14 16:31
|
|
Repository: erp/devel/pi
Changeset: 9c230b478c15aad7893d09e4e80c3f98f54bce74
Author: Adrián Romero <adrianromero <at> openbravo.com>
Date: Wed Apr 14 16:43:54 2010 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/9c230b478c15aad7893d09e4e80c3f98f54bce74 [^]
Fixes issue 0012959: You can give the Systemadministrator orgaccess to an organization other than *
---
M src-db/database/model/triggers/AD_ROLE_CHECK_TRG.xml
M src-db/database/model/triggers/AD_ROLE_ORGACCESS_CHECK_TRG.xml
---
|
|
|
|
|
|
|
|
|
|
|