Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0018389Openbravo ERPA. Platformpublic2011-08-30 16:242011-10-20 11:32
Reporterrgoris 
Assigned Toiperdomo 
PriorityurgentSeveritymajorReproducibilityalways
StatusclosedResolutionunable to reproduce 
PlatformOS5OS Version
Product Version 
Target Version3.0MP5Fixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customer
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0018389: Google Account login - security issue
DescriptionLogging in using your Google account is cool. However, there are a couple of issues that keep it from being very cool.

Security: when activating this feature and you happen to have somebody else´s Google account activated in the same browser, you accidentally would associate their account to your Openbravo!
Steps To ReproduceLog in with somebody else Google account
In the same browser, associate OB to the Google login
Proposed SolutionLet the user confirm (and re-login) to the desired google account before actually creating the association.
Additional Information
TagsNo tags attached.
Relationships
related to defect 00183913.0MP5 closed dbaz Google Account login - tons of typos 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2011-08-30 16:24rgorisNew Issue
2011-08-30 16:24rgorisAssigned To => alostale
2011-08-30 16:24rgorisModules => Core
2011-08-30 16:57rgorisRelationship addedrelated to 0018391
2011-08-30 16:58rgorisStatusnew => scheduled
2011-09-08 18:54rgorisPrioritynormal => urgent
2011-09-27 13:03alostaleTarget Version3.0MP4 => 3.0MP5
2011-09-28 22:19alostaleAssigned Toalostale => iperdomo
2011-09-29 08:39iperdomoNote Added: 0041362
2011-09-29 08:39iperdomoStatusscheduled => feedback
2011-10-20 11:32rgorisStatusfeedback => closed
2011-10-20 11:32rgorisResolutionopen => unable to reproduce

Notes
(0041362)
iperdomo   
2011-09-29 08:39   
If you are logged in in Google and you try to associate the account, you will clearly see that the Openbravo system is trying to access your account, Google accounts will ask you and you can _reject_ it.