Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0004099Openbravo ERPC. Securitypublic2008-06-20 12:492019-04-02 15:10
Reportercromero 
Assigned Toiciordia 
PrioritynormalSeverityminorReproducibilityhave not tried
StatusacknowledgedResolutionopen 
PlatformOS5OS Version
Product Version 
Target VersionFixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customer
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0004099: Delete client should not drop constraints
DescriptionCurrently the Delete Client process drops the database constraints.
The implications of that are:
1) Users cannot be logged in while the Delete Client is run (this is a no-no in a SaaS deployment)
2) In PostgreSQL the process requires superuser privileges
Steps To Reproduce
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
related to defect 00176413.0MP4 closed marvintm Delete Client process does not work (this issue also groups other tickets related to the Delete Client process) 
blocks feature request 00022543.0MP0 closed jpabloae The installer requires database superuser permissions 
blocks feature request 0003392pi acknowledged rmorley Rewrite all procedures that drop/disble DB constraints 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2008-06-20 12:49cromeroNew Issue
2008-06-20 12:49cromeroAssigned To => cromero
2008-06-20 12:49cromerosf_bug_id0 => 1998651
2008-06-21 00:34jpabloaeRelationship addedblocks 0002254
2008-07-01 16:47pjuvaraNote Added: 0008108
2008-07-01 16:47pjuvaraSummaryDelete client should not need SuperUser privileges in PostgreSQL => Delete client should not drop constraints
2008-07-01 16:47pjuvaraDescription Updated
2008-07-01 16:47pjuvaraProjectionnone => minor fix
2008-07-01 16:47pjuvaraStatusnew => acknowledged
2008-07-01 16:47pjuvaraTag Attached: ReleaseCandidate
2008-11-10 13:11cromeroAssigned Tocromero => pjuvara
2008-11-16 12:17pjuvaraRelationship addedblocks 0003392
2008-11-16 12:17pjuvaraTag Detached: ReleaseCandidate
2009-05-22 19:36pjuvaraAssigned Topjuvara => iciordia
2011-06-14 16:38dmitry_mezentsevRelationship addedrelated to 0017641
2019-04-02 15:10ngarciaIssue Monitored: ngarcia

Notes
(0008108)
pjuvara   
2008-07-01 16:47   
Original description was:
>Now, the Delete Client process requires SuperUser privileges in PostgreSQL (to >disable/enable constraints).
>
>It would be nice that this should not be necessary for security reasons.