0043624: It is needed a setAdminMode(true) in isCrossStoreEnabled method of POSUtils.java

Openbravo Issue Tracking System - Retail Modules

View Issue Details

Project

Category

View Status

Date Submitted

Last Update

0043624

Retail Modules

Web POS

public

2019-12-13 09:02

2020-04-23 17:21

Reporter

kchoperena

Assigned To

ranjith_qualiantech_com

Priority

normal

Severity

major

Reproducibility

always

Status

closed

Resolution

fixed

Platform

OS Version

Product Version

Target Version

RR19Q4.4

Fixed in Version

RR19Q4.4

Merge Request Status

Review Assigned To

marvintm

OBNetwork customer

Support ticket

Regression level

Regression date

Regression introduced in release

Regression introduced by commit

Triggers an Emergency Pack

Summary

0043624: It is needed a setAdminMode(true) in isCrossStoreEnabled method of POSUtils.java

Description

It is needed an OBContext.setAdminMode(true) in isCrossStoreEnabled of POSUtils.java because the Category.java is calling through the getQuery method and blocks the login of the WebPOS with some user configuration because the Organization entity is not directly readable.
It happens with users not configured as admin that do not have access to Organization entity and also have a role configured as manual.

Steps To Reproduce

1.- Config a user in the back-end without admin permissions
2.- Assign to the user a role that is manual
3.- Remove from the role the Window Access of the 'Organization' entity.
4.- Try to do a login with the user in the Web POS

EXPECTED RESULT:
The next error should appear in the console log:

2019-12-13 08:55:13,104 [http-nio-8080-exec-1] ERROR org.openbravo.mobile.core.process.ProcessHQLQuery - org.openbravo.retail.posterminal.master.Category: Error when generating query: null (Entity Organization is not directly readable, only id and identifier properties are readable, property Organization.oBRETCOCrossStoreOrganization is neither of these.)
org.openbravo.base.exception.OBSecurityException: Entity Organization is not directly readable, only id and identifier properties are readable, property Organization.oBRETCOCrossStoreOrganization is neither of these.
    at org.openbravo.base.structure.BaseOBObject.checkDerivedReadable(BaseOBObject.java:291) ~[classes/:?]
    at org.openbravo.base.structure.BaseOBObject.get(BaseOBObject.java:252) ~[classes/:?]
    at org.openbravo.base.structure.BaseOBObject.get(BaseOBObject.java:229) ~[classes/:?]
    at org.openbravo.base.structure.BaseOBObject.get(BaseOBObject.java:210) ~[classes/:?]
    at org.openbravo.model.common.enterprise.Organization.getOBRETCOCrossStoreOrganization(Organization.java:2201) ~[classes/:?]
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_222]
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_222]
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_222]
    at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_222]
    at org.hibernate.proxy.pojo.bytebuddy.ByteBuddyInterceptor.intercept(ByteBuddyInterceptor.java:56) ~[hibernate-core-5.4.2.Final.jar:5.4.2.Final]
    at org.hibernate.proxy.ProxyConfiguration$InterceptorDispatcher.intercept(ProxyConfiguration.java:95) ~[hibernate-core-5.4.2.Final.jar:5.4.2.Final]
    at org.openbravo.model.common.enterprise.Organization$HibernateProxy$d75QZZ5l.getOBRETCOCrossStoreOrganization(Unknown Source) ~[classes/:?]
    at org.openbravo.retail.posterminal.POSUtils.isCrossStoreEnabled(POSUtils.java:963) ~[classes/:?]
    at org.openbravo.retail.posterminal.master.Category.getQuery(Category.java:80) ~[classes/:?]

Proposed Solution

Additional Information