Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0015874Openbravo ERPC. Securitypublic2011-02-07 12:482011-05-24 10:56
Reporterjonalegriaesarte 
Assigned Toalostale 
PriorityurgentSeveritymajorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version2.50MP26 
Target Version2.50MP27Fixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customer
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0015874: Permissions to processes are not respected
DescriptionPermissions to processes are not respected.
Steps To Reproduce1) Log with user Openbravo with Openbravo Admin role.
2) Create a new role named My Role, select Manual.
3) Give it access ONLY to window Sales Invoice
4) Create a new user named myuser and assign him MyRole role.
5) Log in with user myuser and create a sales invoice with lines.
6) Click on Complete button.

Even if you have not been given access to Complete Invoice process you are able to
make this process.
Proposed Solution
Additional Information
TagsclosingMay2011
Relationships
depends on backport 00159072.50MP27 closed alostale Permissions to processes are not respected 
related to defect 0024005 closed alostale When doing changes on an element using dal the Ad_context_info is not filled so the audit does not work properly 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2011-02-07 12:48jonalegriaesarteNew Issue
2011-02-07 12:48jonalegriaesarteAssigned To => alostale
2011-02-07 12:48jonalegriaesarteModules => Core
2011-02-07 12:49jonalegriaesarteIssue Monitored: networkb
2011-02-07 13:03rafarodaIssue Monitored: rafaroda
2011-02-09 17:31alostaleNote Added: 0034108
2011-02-09 17:31alostaleStatusnew => scheduled
2011-02-09 17:31alostalefix_in_branch => pi
2011-02-09 17:32hgbotCheckin
2011-02-09 17:32hgbotNote Added: 0034110
2011-02-09 17:32hgbotStatusscheduled => resolved
2011-02-09 17:32hgbotResolutionopen => fixed
2011-02-09 17:32hgbotFixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/3cc3d1a740b29ae39c0eadb9e2f498124c980514 [^]
2011-02-10 09:27hgbotCheckin
2011-02-10 09:27hgbotNote Added: 0034120
2011-02-10 09:27hgbotCheckin
2011-02-10 09:27hgbotNote Added: 0034121
2011-05-24 10:08dalsasuaTag Attached: closingMay2011
2011-05-24 10:56dalsasuaStatusresolved => closed
2013-06-12 08:26alostaleRelationship addedrelated to 0024005

Notes
(0034108)
alostale   
2011-02-09 17:31   
This has been implemented as an optional configuration to be set through a preference:

http://wiki.openbravo.com/wiki/Functional_Documentation/General_Setup#Process_Permissions [^]
(0034110)
hgbot   
2011-02-09 17:32   
Repository: erp/devel/pi
Changeset: 3cc3d1a740b29ae39c0eadb9e2f498124c980514
Author: Asier Lostalé <asier.lostale <at> openbravo.com>
Date: Wed Feb 09 17:32:12 2011 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/3cc3d1a740b29ae39c0eadb9e2f498124c980514 [^]

fixed issue 15874: Permissions to processes are not respected

---
M src-db/database/sourcedata/AD_REF_LIST.xml
M src-wad/src/org/openbravo/wad/javasource.javaxml
---
(0034120)
hgbot   
2011-02-10 09:27   
Repository: erp/devel/pi
Changeset: 06cb91c9976df02e9603b66297dbb064cbb9f731
Author: Asier Lostalé <asier.lostale <at> openbravo.com>
Date: Thu Feb 10 09:25:06 2011 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/06cb91c9976df02e9603b66297dbb064cbb9f731 [^]

related to issue 15874: Reseting to tabId, not window Id

---
M src-wad/src/org/openbravo/wad/javasource.javaxml
---
(0034121)
hgbot   
2011-02-10 09:27   
Repository: erp/devel/pi
Changeset: 34c584c37edce8021d68be5bfe9ec3ef03444f47
Author: Asier Lostalé <asier.lostale <at> openbravo.com>
Date: Thu Feb 10 09:26:14 2011 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/34c584c37edce8021d68be5bfe9ec3ef03444f47 [^]

related to issue 15874: Set admin mode when reading preferences

---
M src/org/openbravo/erpCommon/businessUtility/Preferences.java
---