Openbravo Issue Tracking System - Retail Modules
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0031497Retail ModulesWeb POSpublic2015-09-18 10:032015-12-11 13:37
Reportermalsasua 
Assigned Toguilleaer 
PriorityhighSeveritymajorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS20OS VersionCommunity Appliance
Product VersionRR15Q3 
Target VersionRR15Q4.1Fixed in VersionRR15Q4.1 
Merge Request Status
Review Assigned Tomarvintm
OBNetwork customer
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0031497: Terminal authentication is allowing to connect from two distinct devices
DescriptionThere is one way to link two devices to the same terminal
Steps To Reproduce. configure to enable terminal authentication
 . in backoffice, as system administrator, change the preference "enable authention" to Y
. in backoffice, in POS Terminal -> VBS-1
    Terminal Key Identifier: 123

. in device1:
  . go to WEBPOS, to terminal VBS-1
  . popup with the next fields are displayed:
   Terminal Key Identifier: 123
   user: vallblanca
   pass: openbravo
  . login is done

. go to backoffice
 . check "is link to device" is checked
 . click button "unlink device"
 . check "is link to device" is unchecked

. in device2:
  . go to WEBPOS, to terminal VBS-1
  . popup with the next fields are displayed:
   Terminal Key Identifier: 123
   user: vallblanca
   pass: openbravo
  . login is done

. in device1:
  . go to webpos, with link: hosted/context/web/org.openbravo.retail.posterminal/#
  . login is done
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
blocks defect 0030869 closed guilleaer Terminal authentication is allowing to connect from two distinct devices 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2015-11-16 13:19marvintmTypedefect => backport
2015-11-16 13:19marvintmTarget Version => RR15Q4.1
2015-12-10 22:18hgbotCheckin
2015-12-10 22:18hgbotNote Added: 0082656
2015-12-10 22:18hgbotStatusscheduled => resolved
2015-12-10 22:18hgbotResolutionopen => fixed
2015-12-10 22:18hgbotFixed in SCM revisionhttp://code.openbravo.com/erp/pmods/org.openbravo.retail.posterminal/rev/c4c55341720182737a661e17ff09d70898ba07c8 [^] => http://code.openbravo.com/retail/backports/3.0RR15Q4.1/org.openbravo.retail.posterminal/rev/7f73eebbc7ed6f758044bc555474e917c72dc57a [^]
2015-12-11 13:37marvintmStatusresolved => closed
2015-12-11 13:37marvintmFixed in Version => RR15Q4.1

Notes
(0082656)
hgbot   
2015-12-10 22:18   
Repository: retail/backports/3.0RR15Q4.1/org.openbravo.retail.posterminal
Changeset: 7f73eebbc7ed6f758044bc555474e917c72dc57a
Author: Guillermo Alvarez de Eulate <guillermo.alvarez <at> openbravo.com>
Date: Wed Dec 09 19:30:22 2015 +0100
URL: http://code.openbravo.com/retail/backports/3.0RR15Q4.1/org.openbravo.retail.posterminal/rev/7f73eebbc7ed6f758044bc555474e917c72dc57a [^]

Fixed issue 31497: Terminal authemntication improvements have been added:

- Unique id for each cache session has been added
- When a terminal is linked cache session id is stores at terminal level
- Once a terminal try to link the cache session id is checked

---
M src-db/database/model/tables/OBPOS_APPLICATIONS.xml
M src-db/database/sourcedata/AD_COLUMN.xml
M src-db/database/sourcedata/AD_ELEMENT.xml
M src-db/database/sourcedata/AD_FIELD.xml
M src/org/openbravo/retail/posterminal/CheckTerminalAuth.java
M src/org/openbravo/retail/posterminal/LoginUtilsServlet.java
M src/org/openbravo/retail/posterminal/process/UnlinkDeviceActionHandler.java
M web/org.openbravo.retail.posterminal/js/components/modalselectterminal.js
M web/org.openbravo.retail.posterminal/js/login/model/login-model.js
---