Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0023520Openbravo ERPC. Securitypublic2013-04-09 17:492013-04-30 12:08
Reporteralostale 
Assigned Toalostale 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version 
Target Version3.0MP23Fixed in Version3.0MP23 
Merge Request Status
Review Assigned ToAugustoMauch
OBNetwork customerNo
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0023520: Restrict access to query list widgets
DescriptionDatasources of Query List widgets shouldn't be accessible by URL in case the widget is not included in the ones that are shown in the current's session workspace.
Steps To Reproduce-
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
related to design defect 00235183.0MP23 closed alostale Restrict Access to Portal sessions 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2013-04-09 17:49alostaleNew Issue
2013-04-09 17:49alostaleAssigned To => alostale
2013-04-09 17:49alostaleModules => Core
2013-04-09 17:49alostaleOBNetwork customer => No
2013-04-09 17:49alostaleTriggers an Emergency Pack => No
2013-04-09 17:50alostaleRelationship addedrelated to 0023518
2013-04-15 13:49hgbotCheckin
2013-04-15 13:49hgbotNote Added: 0057899
2013-04-15 13:49hgbotStatusnew => resolved
2013-04-15 13:49hgbotResolutionopen => fixed
2013-04-15 13:49hgbotFixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/08d5a13b722bbc496c640a976d5bb319a1db44bc [^]
2013-04-15 14:43alostaleReview Assigned To => AugustoMauch
2013-04-16 19:18hudsonbotCheckin
2013-04-16 19:18hudsonbotNote Added: 0057976
2013-04-30 12:08AugustoMauchNote Added: 0058342
2013-04-30 12:08AugustoMauchStatusresolved => closed
2013-04-30 12:08AugustoMauchFixed in Version => 3.0MP23

Notes
(0057899)
hgbot   
2013-04-15 13:49   
Repository: erp/devel/pi
Changeset: 08d5a13b722bbc496c640a976d5bb319a1db44bc
Author: Asier Lostalé <asier.lostale <at> openbravo.com>
Date: Wed Apr 10 10:01:55 2013 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/08d5a13b722bbc496c640a976d5bb319a1db44bc [^]

fixed issue 23520: Restrict access to query list widgets

---
M modules/org.openbravo.client.querylist/src-db/database/sourcedata/AD_MESSAGE.xml
M modules/org.openbravo.client.querylist/src/org/openbravo/client/querylist/QueryListDataSource.java
---
(0057976)
hudsonbot   
2013-04-16 19:18   
A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/8df08bea850d [^]

Maturity status: Test
(0058342)
AugustoMauch   
2013-04-30 12:08   
Code reviewed and verified in pi@a7efc1231554