Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0019672Openbravo ERP01. General setuppublic2012-02-07 09:022012-03-13 08:37
xabiermerino 
alostale 
highminoralways
closedno change required 
5
2.50MP38 
2.50MP41 
Core
No
0019672: Inconsistent data when you change the organization of a register
We have an user defiend to organization B with role B. We create a BP with this user. We are able to change the org to A using Openbravo Admin. This is wrong because the createdby is an user defined in the organization B and the BP is defined in the organization A. These organizations are in the same level.

In OB3 this behaviour is not allowed.
-Create new a user:
  * Organization: B
  * user name: b
  * pass: b
- Go to User Roles: select Rol B
- Go to General Setup || Security || Role and select the rol
- Go to Org Access:
    - Eliminate the access to A's organizations and Main's one.
- Login with B user (b/b)
- Create a BP (organization B)
- Login with Openbravo Admin
- Go to the BP created by B change the organization to A
- save it
- In this moment this BP have a column (updatedby) with an user of the B organization. This scenario is not allowed in Openbravo 3. You are not able to save this record because the A organization is in the same level than B organization.
No tags attached.
Issue History
2012-02-07 09:02xabiermerinoNew Issue
2012-02-07 09:02xabiermerinoAssigned To => jonalegriaesarte
2012-02-07 09:02xabiermerinoModules => Core
2012-02-07 09:02xabiermerinoResolution time => 1335132000
2012-02-07 09:06xabiermerinoIssue Monitored: networkb
2012-03-06 12:51jonalegriaesarteAssigned Tojonalegriaesarte => alostale
2012-03-06 16:07alostaleNote Added: 0046093
2012-03-06 16:07alostaleStatusnew => feedback
2012-03-06 16:27xabiermerinoStatusfeedback => new
2012-03-06 16:27xabiermerinoDescription Updatedbug_revision_view_page.php?rev_id=3236#r3236
2012-03-06 16:27xabiermerinoSteps to Reproduce Updatedbug_revision_view_page.php?rev_id=3238#r3238
2012-03-07 12:38xabiermerinoTarget Version2.50MP40 => 2.50MP41
2012-03-13 08:37alostaleNote Added: 0046302
2012-03-13 08:37alostaleStatusnew => closed
2012-03-13 08:37alostaleResolutionopen => no change required

Notes
(0046093)
alostale   
2012-03-06 16:07   
The description and steps to reproduce of this issue are not clear enough. Please provide clearer information.

Thanks.
(0046302)
alostale   
2012-03-13 08:37   
Described behavior is correct, created by and updated by shouldn't be used to enforce security.