Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0036931Openbravo ERPA. Platformpublic2017-09-22 15:472018-01-03 12:38
Reporteraferraz 
Assigned Tocaristu 
PrioritynormalSeveritymajorReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOS30OS VersionOpenbravo Appliance 14.04
Product Version 
Target VersionFixed in Version3.0PR18Q1 
Merge Request Status
Review Assigned Toalostale
OBNetwork customer
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0036931: Process definition with data access level = System only can be launched as normal client
DescriptionProcess definition with data access level = System only can be launched as normal client.
If we have a report and process with data access level = System only, it can not be launched as normal client. Following error is shown:
With your current role and settings, you cannot view this information.
Steps To ReproduceAs system admin, change the data access level of any process definition and report and process.

As F&B admin, run process definition. No error is shown.

As F&B admin, run report and process. Error is shown.
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
related to defect 0036877 closed aferraz Organization selector in Purchase Order Report should restrict the organizations that can be displayed 
Attached Filesdiff issue36931_Sol1.diff (7,538) 2017-09-26 18:50
https://issues.openbravo.com/file_download.php?file_id=11105&type=bug
diff issue36931_Sol2.diff (2,357) 2017-09-26 19:07
https://issues.openbravo.com/file_download.php?file_id=11106&type=bug
diff issue36931_Sol3.diff (5,505) 2017-09-28 17:37
https://issues.openbravo.com/file_download.php?file_id=11121&type=bug
Issue History
Date ModifiedUsernameFieldChange
2017-09-22 15:47aferrazNew Issue
2017-09-22 15:47aferrazAssigned To => platform
2017-09-22 15:47aferrazModules => Core
2017-09-22 15:47aferrazTriggers an Emergency Pack => No
2017-09-22 15:47aferrazRelationship addedrelated to 0036877
2017-09-26 18:48caristuAssigned Toplatform => caristu
2017-09-26 18:48caristuStatusnew => scheduled
2017-09-26 18:50caristuFile Added: issue36931_Sol1.diff
2017-09-26 19:07caristuFile Added: issue36931_Sol2.diff
2017-09-28 17:37caristuFile Added: issue36931_Sol3.diff
2017-10-03 17:28hgbotCheckin
2017-10-03 17:28hgbotNote Added: 0099736
2017-10-03 17:28hgbotStatusscheduled => resolved
2017-10-03 17:28hgbotResolutionopen => fixed
2017-10-03 17:28hgbotFixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/8a784ff649df18cc3895685ddf976cf95e83febc [^]
2017-10-03 17:29caristuReview Assigned To => alostale
2017-10-09 09:03alostaleNote Added: 0099818
2017-10-09 09:03alostaleStatusresolved => closed
2017-10-09 09:03alostaleFixed in Version => 3.0PR18Q1
2018-01-03 12:38hudsonbotCheckin
2018-01-03 12:38hudsonbotNote Added: 0101315

Notes
(0099736)
hgbot   
2017-10-03 17:28   
Repository: erp/devel/pi
Changeset: 8a784ff649df18cc3895685ddf976cf95e83febc
Author: Carlos Aristu <carlos.aristu <at> openbravo.com>
Date: Tue Oct 03 17:10:26 2017 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/8a784ff649df18cc3895685ddf976cf95e83febc [^]

fixes bug 36931: Check data access level of process definitions

  The data access level of the process definition was not being checked. Now, it is verified in the BaseProcessActionHandler before executing any action. In particular the check will be performed by the defaults action handler of each process definition.

  In addition, some code has been added for the OBBaseParameterWindowView class, in order to handle properly in the client the error message coming from the server side when the access level of the process definition is not allowed in the current context

---
M modules/org.openbravo.client.application/src/org/openbravo/client/application/process/BaseProcessActionHandler.java
M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/process/ob-base-parameter-window-view.js
M src/org/openbravo/dal/security/EntityAccessChecker.java
---
(0099818)
alostale   
2017-10-09 09:03   
reviewed + tested
(0101315)
hudsonbot   
2018-01-03 12:38   
A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/c81e0d3cbab5 [^]
Maturity status: Test