Openbravo Issue Tracking System - Openbravo ERP |
View Issue Details |
|
ID | Project | Category | View Status | Date Submitted | Last Update |
0023411 | Openbravo ERP | 08. Project and service management | public | 2013-03-26 19:49 | 2013-04-01 18:58 |
|
Reporter | jonalegriaesarte | |
Assigned To | AugustoMauch | |
Priority | normal | Severity | major | Reproducibility | have not tried |
Status | closed | Resolution | fixed | |
Platform | | OS | 5 | OS Version | |
Product Version | pi | |
Target Version | 3.0MP23 | Fixed in Version | 3.0MP22 | |
Merge Request Status | |
Review Assigned To | shankarb |
OBNetwork customer | |
Web browser | |
Modules | Core |
Support ticket | |
Regression level | |
Regression date | |
Regression introduced in release | |
Regression introduced by commit | |
Triggers an Emergency Pack | No |
|
Summary | 0023411: Employee and invoiceable expenses windows: data is shown to entities without permissions |
Description | Employee and invoiceable expenses windows: data is shown to entities without permissions. Logged in in an entity, can see data that belongs to other entity |
Steps To Reproduce | - Logged in as F&B entity
- Create a new product, expense type, and adding a price
- Create a expense sheet with one line. In the line select the product just created and flag it as reinvoiceable.
- Employee expense window (or invoiceable expense window), the user can see the data.
- Change to QA Testing entity
- Employee expense window (or invoiceable expense window), the user can see the data.
- The user can see the same data. |
Proposed Solution | |
Additional Information | |
Tags | No tags attached. |
Relationships | |
Attached Files | |
|
Issue History |
Date Modified | Username | Field | Change |
2013-03-26 19:49 | jonalegriaesarte | New Issue | |
2013-03-26 19:49 | jonalegriaesarte | Assigned To | => AugustoMauch |
2013-03-26 19:49 | jonalegriaesarte | Modules | => Core |
2013-03-26 19:49 | jonalegriaesarte | Triggers an Emergency Pack | => No |
2013-03-27 13:03 | AugustoMauch | Issue Monitored: shankarb | |
2013-03-27 13:04 | AugustoMauch | Review Assigned To | => shankarb |
2013-03-27 13:07 | hgbot | Checkin | |
2013-03-27 13:07 | hgbot | Note Added: 0057486 | |
2013-03-27 13:07 | hgbot | Status | new => resolved |
2013-03-27 13:07 | hgbot | Resolution | open => fixed |
2013-03-27 13:07 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/1da96e09abea9a8e7516cdcc9028f844cb3cb1c2 [^] |
2013-03-27 13:46 | AugustoMauch | Note Added: 0057488 | |
2013-03-28 06:08 | shankarb | Note Added: 0057529 | |
2013-03-28 06:08 | shankarb | Status | resolved => closed |
2013-03-28 06:08 | shankarb | Fixed in Version | => 3.0MP22 |
2013-04-01 18:58 | hudsonbot | Checkin | |
2013-04-01 18:58 | hudsonbot | Note Added: 0057543 | |
Notes |
|
(0057486)
|
hgbot
|
2013-03-27 13:07
|
|
Repository: erp/devel/pi
Changeset: 1da96e09abea9a8e7516cdcc9028f844cb3cb1c2
Author: Augusto Mauch <augusto.mauch <at> openbravo.com>
Date: Wed Mar 27 13:05:59 2013 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/1da96e09abea9a8e7516cdcc9028f844cb3cb1c2 [^]
Fixes issue 23411: Fixed wrong hql where clause
The hql where clause had an extra closing parenthesis. This was making the hql query work improperly, and the client and organization filters were not being applied.
---
M src-db/database/sourcedata/AD_TAB.xml
---
|
|
|
|
|
|
(0057529)
|
shankarb
|
2013-03-28 06:08
|
|
Code reviewed @ pi changeset dcf503f0d385 |
|
|
|
|