Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0026572Openbravo ERPA. Platformpublic2014-05-16 12:422014-10-01 16:40
guillermogil 
guillermogil 
normalminorhave not tried
closedfixed 
30
 
3.0PR14Q2.1 
alostale
Google Chrome
Core
Production - QA Approved
2013-12-03
3.0PR14Q2
https://code.openbravo.com/erp/devel/pi/rev/a60184d93ff1 [^]
No
0026572: Calls to web service are failing if the role used don't have permission to User window
Calls to web service are failing if the role used don't have permission to User window
* Create a role with access only to country window
* Create a User associated with that role
* Call to webservice with that User(e.g.- http://localhost:8080/openbravo/ws/dal/Country?maxResults=2 [^])
* Call again to the webservice
No tags attached.
depends on defect 00251763.0PR14Q2 closed shankarb It's possible to access web services even if the maximum allowed calls is exceeded 
Issue History
2014-05-16 12:42guillermogilNew Issue
2014-05-16 12:42guillermogilAssigned To => guillermogil
2014-05-16 12:42guillermogilWeb browser => Google Chrome
2014-05-16 12:42guillermogilModules => Core
2014-05-16 12:42guillermogilTriggers an Emergency Pack => No
2014-05-16 13:37guillermogilRelationship addeddepends on 0025176
2014-05-16 13:39guillermogilWeb browserGoogle Chrome => Google Chrome
2014-05-16 13:39guillermogilSteps to Reproduce Updatedbug_revision_view_page.php?rev_id=5842#r5842
2014-05-16 13:41guillermogilWeb browserGoogle Chrome => Google Chrome
2014-05-16 13:41guillermogilRegression date => 2013-12-03
2014-05-16 13:41guillermogilRegression introduced by commit => https://code.openbravo.com/erp/devel/pi/rev/a60184d93ff1 [^]
2014-05-19 09:02guillermogilWeb browserGoogle Chrome => Google Chrome
2014-05-19 09:02guillermogilSummaryCalls to web service are failing if the role used don't have permission to User window and the user is locked => Calls to web service are failing if the role used don't have permission to User window
2014-05-19 09:02guillermogilDescription Updatedbug_revision_view_page.php?rev_id=5851#r5851
2014-05-19 09:02guillermogilSteps to Reproduce Updatedbug_revision_view_page.php?rev_id=5852#r5852
2014-05-19 09:51guillermogilIssue Monitored: alostale
2014-05-19 09:51guillermogilReview Assigned To => alostale
2014-05-19 09:51guillermogilWeb browserGoogle Chrome => Google Chrome
2014-05-19 09:54hgbotCheckin
2014-05-19 09:54hgbotNote Added: 0067244
2014-05-19 09:54hgbotStatusnew => resolved
2014-05-19 09:54hgbotResolutionopen => fixed
2014-05-19 09:54hgbotFixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/3e03b90c27d7537381a897e6964daf82597525ea [^]
2014-05-19 17:38hudsonbotCheckin
2014-05-19 17:38hudsonbotNote Added: 0067272
2014-05-20 09:05alostaleNote Added: 0067292
2014-05-20 09:05alostaleStatusresolved => closed
2014-05-20 09:05alostaleFixed in Version => PR14Q2.1
2014-10-01 16:40plujanWeb browserGoogle Chrome => Google Chrome
2014-10-01 16:40plujanRegression level => Production - QA Approved
2014-10-01 16:40plujanRegression introduced in release => 3.0PR14Q2

Notes
(0067244)
hgbot   
2014-05-19 09:54   
Repository: erp/devel/pi
Changeset: 3e03b90c27d7537381a897e6964daf82597525ea
Author: Guillermo Gil <guillermo.gil <at> openbravo.com>
Date: Mon May 19 09:53:59 2014 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/3e03b90c27d7537381a897e6964daf82597525ea [^]

Fixed issue 26572:Calls to webservice fails if user has no access to user

Added AdminMode to isLockedUser

---
M src/org/openbravo/base/secureApp/UserLock.java
---
(0067272)
hudsonbot   
2014-05-19 17:38   
A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/6303d9b2384d [^]
Maturity status: Test
(0067292)
alostale   
2014-05-20 09:05   
Code reviewed

Tested with a role having access only to Country window