Openbravo Issue Tracking System - Retail Modules
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0039731Retail ModulesStoreServerpublic2018-12-02 11:082018-12-03 16:38
Reportermtaal 
Assigned Tomtaal 
PrioritynormalSeveritymajorReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version 
Target VersionFixed in Version 
Merge Request Status
Review Assigned Tomigueldejuana
OBNetwork customerNo
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0039731: Server Message Handler gets into permission error when reading the content of the message
DescriptionSee stack trace below. Happens once a day in each store. See attached screenshot for the type of action.

org.openbravo.base.exception.OBSecurityException: Entity C_IMPORT_ENTRY is not directly readable, only id and identifier properties are readable, property C_IMPORT_ENTRY.jsonInfo is neither of these.
    at org.openbravo.base.structure.BaseOBObject.checkDerivedReadable(BaseOBObject.java:295)
    at org.openbravo.base.structure.BaseOBObject.get(BaseOBObject.java:255)
    at org.openbravo.base.structure.BaseOBObject.get(BaseOBObject.java:232)
    at org.openbravo.base.structure.BaseOBObject.get(BaseOBObject.java:213)
    at org.openbravo.service.importprocess.ImportEntry.getJsonInfo(ImportEntry.java:154)
    at org.openbravo.mobile.core.servercontroller.MobileServerMessageProcessor$MobileServerMessageRunnable.processEntry(MobileServerMessageProcessor.java:55)
    at org.openbravo.service.importprocess.ImportEntryProcessor$ImportEntryProcessRunnable.doRunCycle(ImportEntryProcessor.java:374)
    at org.openbravo.service.importprocess.ImportEntryProcessor$ImportEntryProcessRunnable.run(ImportEntryProcessor.java:295)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at java.lang.Thread.run(Thread.java:745)
Steps To ReproduceInstall multi-server close session in the cs
Proposed SolutionAdd admin mode
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2018-12-02 11:08mtaalNew Issue
2018-12-02 11:08mtaalAssigned To => mtaal
2018-12-02 11:08mtaalOBNetwork customer => No
2018-12-02 11:08mtaalTriggers an Emergency Pack => No
2018-12-02 12:46mtaalNote Added: 0108214
2018-12-02 13:21hgbotCheckin
2018-12-02 13:21hgbotNote Added: 0108216
2018-12-02 13:21hgbotStatusnew => resolved
2018-12-02 13:21hgbotResolutionopen => fixed
2018-12-02 13:21hgbotFixed in SCM revision => http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/9e43311dafa4c53c87f8b6857e7b09ee3a15e9be [^]
2018-12-02 13:23mtaalReview Assigned To => migueldejuana
2018-12-03 16:38migueldejuanaNote Added: 0108225
2018-12-03 16:38migueldejuanaStatusresolved => closed

Notes
(0108214)
mtaal   
2018-12-02 12:46   
Reproducing it:
- make sure that there is a user with a role who has no access to data import entries window
- let this use run Close Store in the CS
- message gets synced to SS
- then run direct process import entry using this same not-authorized user
(0108216)
hgbot   
2018-12-02 13:21   
Repository: erp/pmods/org.openbravo.mobile.core
Changeset: 9e43311dafa4c53c87f8b6857e7b09ee3a15e9be
Author: Martin Taal <martin.taal <at> openbravo.com>
Date: Sun Dec 02 13:20:52 2018 +0100
URL: http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/9e43311dafa4c53c87f8b6857e7b09ee3a15e9be [^]

Fixes issue 39731: Server Message Handler gets into permission error when reading the content of the message
Retrieve the import entry data in an admin block

---
M src/org/openbravo/mobile/core/servercontroller/MobileServerMessageProcessor.java
---
(0108225)
migueldejuana   
2018-12-03 16:38   
Reviewed