Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0044130Openbravo ERPA. Platformpublic2020-05-21 11:152020-05-26 12:00
santi_lozano 
platform 
normalmajoralways
closedno change required 
5
 
 
Core
No
0044130: Inability to hidden a widget for a user / role
One user that has assigned one role can select on their workspace a dropdown Add Widget in order to add new widgets to their workspace. Logic to display those widgets here should be:
-Enable for All Users option on Widget window
-Role window, Widget Class Access tab, entry here active or not
But after setting it to not display the widget, it is still appearing in some cases
This way one user can view information that he shouldn't be allowed to view
* Log into livebuilds Openbravo / openbravo
https://livebuilds.openbravo.com/retail_stable_pgsql_pi [^]
* Go to User window. Create a new one. Client = F&B International Group, Organization = F&B US, Inc., Name = TestUser1, Username = TestUser1, also set a password for it. Add the role F&B US Inc – Employee on the User Roles tab
* Change role to System Administrator. Go to Widget window, and select Best Sellers widget. Uncheck Enable for All Users option (maybe you need to set the belonging module to be in development)
* Go back to role F&B International Group Admin. Go to Role window, select F&B US Inc – Employee, review that there are no entries on Widget Class Access tab.
* Log out from Openbravo. Log in as TestUser1. Select Add Widget on workspace, Best Sellers options is still there
There was a related issue on previous versions
https://issues.openbravo.com/view.php?id=38096 [^]
No tags attached.
png widget best sellers.png (138,554) 2020-05-21 11:15
https://issues.openbravo.com/file_download.php?file_id=14512&type=bug
png
Issue History
2020-05-21 11:15santi_lozanoNew Issue
2020-05-21 11:15santi_lozanoAssigned To => platform
2020-05-21 11:15santi_lozanoFile Added: widget best sellers.png
2020-05-21 11:15santi_lozanoModules => Core
2020-05-21 11:15santi_lozanoTriggers an Emergency Pack => No
2020-05-21 11:17santi_lozanoDescription Updatedbug_revision_view_page.php?rev_id=21082#r21082
2020-05-21 11:23santi_lozanoResolution time => 1591826400
2020-05-21 11:23santi_lozanoSeverityminor => major
2020-05-21 11:23santi_lozanoDescription Updatedbug_revision_view_page.php?rev_id=21083#r21083
2020-05-26 12:00alostaleNote Added: 0120280
2020-05-26 12:00alostaleStatusnew => closed
2020-05-26 12:00alostaleResolutionopen => no change required

Notes
(0120280)
alostale   
2020-05-26 12:00   
It works as expected after restarting tomcat or if initially modules were in development.

When modules are not in development their AD (Widget > Enable for all users) is globally cached. Changing it in production is only supported through module update.