0044787: Background processes defined at System only shouldn't be available outside System

Openbravo Issue Tracking System - Openbravo ERP

View Issue Details

Project

Category

View Status

Date Submitted

Last Update

0044787

Openbravo ERP

01. General setup

public

2020-08-11 14:09

2022-02-01 07:24

Reporter

vmromanos

Assigned To

Triage Platform Base

Priority

normal

Severity

minor

Reproducibility

always

Status

new

Resolution

open

Platform

OS Version

Product Version

Target Version

Fixed in Version

Merge Request Status

Review Assigned To

OBNetwork customer

Web browser

Modules

Core

Support ticket

Regression level

Regression date

Regression introduced in release

Regression introduced by commit

Triggers an Emergency Pack

Summary

0044787: Background processes defined at System only shouldn't be available outside System

Description

When a background process is defined at System level it can be scheduled in any client within the environment.

This is wrong, and it should only be available at the System client. In fact, ideally, the System level Process Requests and the associated Process Monitor records should NOT be visible outside the System client.

Steps To Reproduce

Log in https://livebuilds.openbravo.com/retail_modules_pgsql_pi/ [^]

Change role to F&B Admin

Go to Process Request window and search for the already scheduled French Fiscal Security Background. The record is available, and even the Unschedule Process button. This is wrong and the record should be hidden from the grid.

Go to Process Monitor tab and open any record and check the log contains information about other clients, which could compromise the privacy in a multitenancy environment. Ideally, the Process Request should be hidden so the Process Monitors records shouldn't be available neither.

Proposed Solution

Check the data access visibility to show/hide process request and to schedule/unschedule them

Additional Information