Openbravo Issue Tracking System - Openbravo ERP |
| View Issue Details |
|
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0000467 | Openbravo ERP | C. Security | public | 2008-05-28 20:15 | 2008-07-01 17:56 |
|
| Reporter | psarobe | |
| Assigned To | alostale | |
| Priority | urgent | Severity | major | Reproducibility | always |
| Status | closed | Resolution | fixed | |
| Platform | | OS | 5 | OS Version | |
| Product Version | 2.40alpha-r2 | |
| Target Version | 2.40 | Fixed in Version | 2.40alpha-r3 | |
| Merge Request Status | |
| Review Assigned To | |
| OBNetwork customer | No |
| Web browser | |
| Modules | Core |
| Support ticket | |
| Regression level | |
| Regression date | |
| Regression introduced in release | |
| Regression introduced by commit | |
| Triggers an Emergency Pack | No |
|
| Summary | 0000467: Organization (*) when user level=Organization and Access level=Client/Organization |
| Description | When the conditions are "user level"(Role)=Organization and "Access level"(Table)=Client/Organization you should be able to see/access to all the records that are created in the organizations that belong to the tree where the role has access to.
This works but not for Organization (*) that obviously belongs to that tree. Right now under these conditions you cannot see records created in organization (*) and you should |
| Steps To Reproduce | 1. Create a role with user level=Organization
2. Give the role access to an organization different than (*)
Go to Master data management->Product. With that role you are not able to see records created in (*). You should be able to see them but not edit |
| Proposed Solution | |
| Additional Information | |
| Tags | No tags attached. |
| Relationships | |
| Attached Files | |
|
| Issue History |
| Date Modified | Username | Field | Change |
| 2008-05-28 20:15 | psarobe | New Issue | |
| 2008-05-28 20:15 | psarobe | Assigned To | => alostale |
| 2008-05-28 20:15 | psarobe | OBNetwork customer | => N |
| 2008-06-02 09:05 | svnbot | Checkin | |
| 2008-06-02 09:05 | svnbot | Note Added: 0000401 | |
| 2008-06-02 09:05 | svnbot | Status | new => resolved |
| 2008-06-02 09:05 | svnbot | Resolution | open => fixed |
| 2008-06-02 09:05 | svnbot | svn_revision | => 4708 |
| 2008-06-03 13:03 | cheli | Note Added: 0000419 | |
| 2008-06-03 15:30 | alostale | Note Added: 0000421 | |
| 2008-06-11 12:46 | cromero | Target Version | => 2.40 |
| 2008-06-11 14:33 | cromero | Fixed in Version | => 2.40alpha r3 |
| 2008-06-19 11:55 | plujan | Status | resolved => closed |
| 2008-07-01 17:56 | anonymous | sf_bug_id | 0 => 2007902 |
|
Notes |
|
|
(0000401)
|
|
svnbot
|
|
2008-06-02 09:05
|
|
Repository: openbravo
Revision: 4708
Author: alostale
Date: 2008-06-02 09:05:27 +0200 (Mon, 02 Jun 2008)
fixed bug 0000467: #AccessibleOrgTree should always contain organization * because it is always accessible although not editable
---
U trunk/src/org/openbravo/erpCommon/utility/Utility.java
---
https://dev.openbravo.com/websvn/openbravo/?rev=4708&sc=1 [^]
|
|
|
|
(0000419)
|
|
cheli
|
|
2008-06-03 13:03
|
|
Two comments. I have probe the bug fix and it works but...
1:- When I try to modify a product from * organization I can not edit it, if I try to do that (for example trying to write in a textbox) the save buttons get enabled although if a push one of them a get this error "With your current role you don't have write permission." It would be nice if "save buttons" don't get enabled in this scenario.
2:- If I try to insert a new product with a role I'm not able to write in * organization, the combobox "organization doesn't show me * but if a select one organization then it do show me the * org. I think the callout is the responsible of this issue. |
|
|
|
|
I've reported two bugs about these issues: 1 0000535 and 2 #536
I encourage you not to report these kind of issues as comments in solved items but reporting new ones, thank you. |
|