Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0038926Openbravo ERP09. Financial managementpublic2018-07-10 15:422018-08-08 13:06
Reporterngarcia 
Assigned Tomarkmm82 
PriorityurgentSeveritymajorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version 
Target VersionFixed in Version3.0PR18Q4 
Merge Request Status
Review Assigned Todmiguelez
OBNetwork customerOBPS
Web browser
ModulesCore
Support ticket3134
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0038926: Not Posted Transaction Report is showing records that belong to organizations the role does not have access to
DescriptionNot Posted Transaction Report is showing records that belong to organizations the role does not have access to
Steps To ReproduceAs group admin role:
   Unschedule "Acct Server Process" background process
   Create a new Sales Invoice in F&B US, Inc
   Create a new role
      User level: Organization
      Manual: Y
   Add access to F&B España, S.A. organization
   Add access to Not Posted Transaction Report
   Assign it to Openbravo user

Log in with that role
   Launch the Not Posted Transaction Report and check the previously created invoice is shown
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2018-07-10 15:42ngarciaNew Issue
2018-07-10 15:42ngarciaAssigned To => Triage Finance
2018-07-10 15:42ngarciaOBNetwork customer => Yes
2018-07-10 15:42ngarciaModules => Core
2018-07-10 15:42ngarciaSupport ticket => 3134
2018-07-10 15:42ngarciaResolution time => 1532988000
2018-07-10 15:42ngarciaTriggers an Emergency Pack => No
2018-07-10 15:45ngarciaIssue Monitored: networkb
2018-07-10 16:38PracticsIssue Monitored: Practics
2018-07-16 16:51markmm82Assigned ToTriage Finance => markmm82
2018-07-16 16:52markmm82Statusnew => acknowledged
2018-07-20 01:24markmm82Note Added: 0105814
2018-07-20 01:24markmm82Statusacknowledged => scheduled
2018-07-25 12:50hgbotCheckin
2018-07-25 12:50hgbotNote Added: 0105946
2018-07-25 12:50hgbotStatusscheduled => resolved
2018-07-25 12:50hgbotResolutionopen => fixed
2018-07-25 12:50hgbotFixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/8b5e2d88f58683e7e804bfaa8f0c49d8a44f2ada [^]
2018-07-25 12:50dmiguelezReview Assigned To => dmiguelez
2018-07-25 12:50dmiguelezNote Added: 0105947
2018-07-25 12:50dmiguelezStatusresolved => closed
2018-07-25 12:50dmiguelezFixed in Version => 3.0PR18Q4
2018-08-08 13:06hudsonbotCheckin
2018-08-08 13:06hudsonbotNote Added: 0106231

Notes
(0105814)
markmm82   
2018-07-20 01:24   
Test Plan:
As group admin role:
   Unschedule "Acct Server Process" background process
   Create a new Sales Invoice in F&B US, Inc
   Create a new role
      User level: Organization
      Manual: Y
   Add access to F&B España, S.A. organization
   Add access to Not Posted Transaction Report
   Assign it to Openbravo user

Log in with that role
   Launch the Not Posted Transaction Report and check the previously created invoice is not shown.
   Notice that only transactions for F&B España, S.A. and it children are shown.

As group admin role:
   Go to previously created role and change the access to F&B US, Inc organization instead of F&B España, S.A. organization.
Log in with that role again
   Launch the Not Posted Transaction Report and check the previously created invoice is now shown.
   Notice that transactions for F&B US, Inc and it children are only ones shown.
(0105946)
hgbot   
2018-07-25 12:50   
Repository: erp/devel/pi
Changeset: 8b5e2d88f58683e7e804bfaa8f0c49d8a44f2ada
Author: Mark <markmm82 <at> gmail.com>
Date: Wed Jul 18 22:56:00 2018 -0400
URL: http://code.openbravo.com/erp/devel/pi/rev/8b5e2d88f58683e7e804bfaa8f0c49d8a44f2ada [^]

Fixes issue 38926: Not Posted Transaction Report is showing records that belong
to organizations the role does not have access to

Added filtering by organizations to avoid see entries of organizations not accessible
by the user role in the Not Posted Transaction Report.

---
M src/org/openbravo/erpCommon/ad_reports/ReportNotPosted.java
M src/org/openbravo/erpCommon/ad_reports/ReportNotPosted_data.xsql
---
(0105947)
dmiguelez   
2018-07-25 12:50   
Code Review + Testing Ok
(0106231)
hudsonbot   
2018-08-08 13:06   
A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/bfd7a414183a [^]
Maturity status: Test