Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0002958Openbravo ERPC. Securitypublic2008-05-06 14:512008-06-19 19:26
Reporteruser71 
Assigned Touser71 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version 
Target VersionFixed in Version2.40alpha-r2 
Merge Request Status
Review Assigned To
OBNetwork customerNo
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0002958: Can delete records from client 0 without access permission
DescriptionProblem:
  - For delete in datagrids always has permision on records from client 0.

Steps:
  - With role System Administrator create a user.
  - Change role to and other with less priviliges(e.g. role b)
  - Go to users and in edit mode you can't delete the record, but in RELATIONAL mode you CAN DELETE the record.
Steps To Reproduce
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2008-06-19 19:26psarobeStatusresolved => closed

Notes
(0006547)
user71   
2005-06-01 00:00   
(edited on: 2008-06-12 09:43)
This bug was originally reported in SourceForge bug tracker and then migrated to Mantis.

You can see the original bug report in:
https://sourceforge.net/support/tracker.php?aid=1958704 [^]
(0003668)
user71   
2008-05-06 14:58   
(edited on: 2008-06-12 09:26)
Logged In: YES
user_id=1964080
Originator: YES

Fixed since revision 3967 in the trunk

  - Added windowId and accessLevel control for delete in datagrids

  Change
    Utility.getContext(this, vars, "#User_Client", "win")
  into
    Utility.getContext(this, vars, "#User_Client", WindowId, accessLevel)