Openbravo Issue Tracking System - Retail Modules | ||||||||||||||||||||||||||
View Issue Details | ||||||||||||||||||||||||||
ID | Project | Category | View Status | Date Submitted | Last Update | |||||||||||||||||||||
0035981 | Retail Modules | Web POS | public | 2017-05-12 09:15 | 2017-10-25 12:21 | |||||||||||||||||||||
Reporter | jonibc | |||||||||||||||||||||||||
Assigned To | jorge-garcia | |||||||||||||||||||||||||
Priority | high | Severity | major | Reproducibility | always | |||||||||||||||||||||
Status | closed | Resolution | fixed | |||||||||||||||||||||||
Platform | OS | 5 | OS Version | |||||||||||||||||||||||
Product Version | ||||||||||||||||||||||||||
Target Version | pi | Fixed in Version | RR18Q1 | |||||||||||||||||||||||
Merge Request Status | ||||||||||||||||||||||||||
Review Assigned To | marvintm | |||||||||||||||||||||||||
OBNetwork customer | ||||||||||||||||||||||||||
Support ticket | ||||||||||||||||||||||||||
Regression level | ||||||||||||||||||||||||||
Regression date | ||||||||||||||||||||||||||
Regression introduced in release | ||||||||||||||||||||||||||
Regression introduced by commit | ||||||||||||||||||||||||||
Triggers an Emergency Pack | No | |||||||||||||||||||||||||
Summary | 0035981: [SERQA 2847] Buttons for customer and locations are not blocked in synchronized mode. | |||||||||||||||||||||||||
Description | Buttons for customer and locations are not blocked in synchronized mode. If the user click the button, it is possible to click it again, sending multiple requests. A malicious user can block the whole server if thousands of requests are made. It is reproducible in livebuilds. | |||||||||||||||||||||||||
Steps To Reproduce | 1.- Set "WebPOS Synchronized Mode" preference with value 'Y', check the selected flag. 2.- Login in the WebPOS. 3.- Open customer selection component. 4.- Insert some data for the customer. 5.- Click on Save button several times. It is possible to check in Chrome Developer Tools that several requests are done to the backend. It is possible to reproduce the issue in address component: 1.- Set "WebPOS Synchronized Mode" preference with value 'Y', check the selected flag. 2.- Login in the WebPOS. 3.- Select a customer different from anonymous. 4.- Open the addresses component. 5.- Insert some data for the address, 6.- Click on Save button several times. It is possible to check in Chrome Developer Tools that several requests are done to the backend. | |||||||||||||||||||||||||
Proposed Solution | Block the buttons once the user click them one time. It would be nice to check if we have the same behavior in other buttons. | |||||||||||||||||||||||||
Additional Information | ||||||||||||||||||||||||||
Tags | No tags attached. | |||||||||||||||||||||||||
Relationships |
| |||||||||||||||||||||||||
Attached Files | issue35981Posterminal17Q1.diff (11,494) 2017-10-23 17:47 https://issues.openbravo.com/file_download.php?file_id=11218&type=bug | |||||||||||||||||||||||||
Issue History | ||||||||||||||||||||||||||
Date Modified | Username | Field | Change | |||||||||||||||||||||||
2017-05-12 09:15 | jonibc | New Issue | ||||||||||||||||||||||||
2017-05-12 09:15 | jonibc | Assigned To | => Retail | |||||||||||||||||||||||
2017-05-12 09:15 | jonibc | Resolution time | => 1495836000 | |||||||||||||||||||||||
2017-05-12 09:15 | jonibc | Triggers an Emergency Pack | => No | |||||||||||||||||||||||
2017-05-12 10:35 | jonibc | Description Updated | bug_revision_view_page.php?rev_id=15155#r15155 | |||||||||||||||||||||||
2017-05-12 10:35 | jonibc | Proposed Solution updated | ||||||||||||||||||||||||
2017-05-19 09:53 | jorge-garcia | Status | new => scheduled | |||||||||||||||||||||||
2017-05-19 09:53 | jorge-garcia | Assigned To | Retail => jorge-garcia | |||||||||||||||||||||||
2017-05-24 08:39 | hgbot | Checkin | ||||||||||||||||||||||||
2017-05-24 08:39 | hgbot | Note Added: 0096737 | ||||||||||||||||||||||||
2017-05-24 08:39 | hgbot | Status | scheduled => resolved | |||||||||||||||||||||||
2017-05-24 08:39 | hgbot | Resolution | open => fixed | |||||||||||||||||||||||
2017-05-24 08:39 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/pmods/org.openbravo.retail.posterminal/rev/c39c5cd6c40102c2dce7872c48da36e7f049657e [^] | |||||||||||||||||||||||
2017-05-25 19:15 | marvintm | Note Added: 0096820 | ||||||||||||||||||||||||
2017-05-25 19:15 | marvintm | Status | resolved => new | |||||||||||||||||||||||
2017-05-25 19:15 | marvintm | Resolution | fixed => open | |||||||||||||||||||||||
2017-05-25 19:17 | marvintm | Type | design defect => defect | |||||||||||||||||||||||
2017-05-29 11:49 | jorge-garcia | Status | new => scheduled | |||||||||||||||||||||||
2017-05-29 16:19 | hgbot | Checkin | ||||||||||||||||||||||||
2017-05-29 16:19 | hgbot | Note Added: 0096859 | ||||||||||||||||||||||||
2017-05-29 16:35 | jorge-garcia | Status | scheduled => resolved | |||||||||||||||||||||||
2017-05-29 16:35 | jorge-garcia | Resolution | open => fixed | |||||||||||||||||||||||
2017-05-30 17:34 | marvintm | Review Assigned To | => marvintm | |||||||||||||||||||||||
2017-05-30 17:34 | marvintm | Status | resolved => closed | |||||||||||||||||||||||
2017-05-30 17:34 | marvintm | Fixed in Version | => RR17Q3 | |||||||||||||||||||||||
2017-06-19 17:15 | jonibc | Relationship added | related to 0036275 | |||||||||||||||||||||||
2017-08-23 10:35 | jonibc | Relationship added | related to 0036701 | |||||||||||||||||||||||
2017-10-23 09:44 | hgbot | Checkin | ||||||||||||||||||||||||
2017-10-23 09:44 | hgbot | Note Added: 0099983 | ||||||||||||||||||||||||
2017-10-23 09:44 | hgbot | Status | closed => resolved | |||||||||||||||||||||||
2017-10-23 09:44 | hgbot | Fixed in SCM revision | http://code.openbravo.com/erp/pmods/org.openbravo.retail.posterminal/rev/c39c5cd6c40102c2dce7872c48da36e7f049657e [^] => http://code.openbravo.com/erp/pmods/org.openbravo.retail.posterminal/rev/e27d059326bf32decf03adf2664d78fda697fccb [^] | |||||||||||||||||||||||
2017-10-23 09:44 | hgbot | Checkin | ||||||||||||||||||||||||
2017-10-23 09:44 | hgbot | Note Added: 0099984 | ||||||||||||||||||||||||
2017-10-23 09:44 | hgbot | Fixed in SCM revision | http://code.openbravo.com/erp/pmods/org.openbravo.retail.posterminal/rev/e27d059326bf32decf03adf2664d78fda697fccb [^] => http://code.openbravo.com/erp/pmods/org.openbravo.retail.posterminal/rev/c89293205f97843b892e530578e79b43e0b4d2df [^] | |||||||||||||||||||||||
2017-10-23 17:47 | migueldejuana | File Added: issue35981Posterminal17Q1.diff | ||||||||||||||||||||||||
2017-10-24 10:04 | migueldejuana | Note Added: 0100014 | ||||||||||||||||||||||||
2017-10-25 12:21 | jorge-garcia | Note Added: 0100052 | ||||||||||||||||||||||||
2017-10-25 12:21 | jorge-garcia | Status | resolved => closed | |||||||||||||||||||||||
2017-10-25 12:21 | jorge-garcia | Fixed in Version | RR17Q3 => RR18Q1 | |||||||||||||||||||||||
2017-10-31 11:16 | ranjith_qualiantech_com | Relationship added | related to 0037186 |
Notes | |||||
|
|||||
|
|
||||
|
|||||
|
|
||||
|
|||||
|
|
||||
|
|||||
|
|
||||
|
|||||
|
|
||||
|
|||||
|
|
||||
|
|||||
|
|