Openbravo Issue Tracking System - Retail Modules
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0041038Retail ModulesWeb POSpublic2019-06-06 00:322019-06-06 00:32
Reporterlbressan 
Assigned ToRetail 
PrioritynormalSeverityminorReproducibilityalways
StatusnewResolutionopen 
PlatformOS5OS Version
Product Versionmain 
Target VersionFixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customer
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0041038: User is selectable on Web POS login screen even when they don't have access to terminal
DescriptionA user that does not have access to a POS Terminal appears in the login screen, and can login.
This issue is present in 18Q1.3 but it may be present in earlier versions. It is also present in 19Q2 which seems that its still present in the versions in between
Steps To Reproduce1. Create a role that has access to Web POS (manual, with access to web pos form and any store organization).
2. Create a user
3. Assign that role to the user.
4. Ensure that the user does not have any terminal in tab POS Terminal Access.
5. Access a terminal URL (ideally of the same org assigned to the role, but it may happen on any store).
6. Observe that the user list shows this user and even you can use that user to login.
Proposed SolutionThe query in LoginUtilsServlet.java seems to check for this, but somehow the user is still considered in the results. Check what is wrong with the query.
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2019-06-06 00:32lbressanNew Issue
2019-06-06 00:32lbressanAssigned To => Retail
2019-06-06 00:32lbressanTriggers an Emergency Pack => No

There are no notes attached to this issue.