0047853: JIRA-2368: Permissions are wrong for drawer menu subentries if changing user

Openbravo Issue Tracking System - POS2

View Issue Details

Project

Category

View Status

Date Submitted

Last Update

0047853

POS2

Core

public

2021-10-14 17:43

2021-10-18 14:04

Reporter

cberner

Assigned To

cberner

Priority

normal

Severity

major

Reproducibility

have not tried

Status

closed

Resolution

fixed

Platform

OS Version

Product Version

Target Version

TAP

Fixed in Version

TAP

Merge Request Status

Review Assigned To

caristu

OBNetwork customer

Support ticket

Regression level

Regression date

Regression introduced in release

Regression introduced by commit

Triggers an Emergency Pack

Summary

0047853: JIRA-2368: Permissions are wrong for drawer menu subentries if changing user

Description

When pressing login, user actions permissions are not updated for the entries of groups of the drawer menu, resulting in this appearing as disabled when they should be enabled, and enabled when should be disabled, because the previous state is the one being mantained.

For example, a Manager with permission to all subentries logs in, he has all options available. If he doesn't refresh, logs out, and an employee with no permissions logs in, he'll have the same access to the drawer menu subentries as the manager.

Note: This doesn't affect the group button, for example Customers window works fine, and permissions are updated correctly.

Steps To Reproduce

1. Login in Backoffice as Openbravo and WhiteValleyGroup admin role
2. Go to Role window and select VallBlancaManual role
2.1. In UserActionAccess remove "SwitchCurrentWindow_OBPOS2_CustomerWindow" entry
2.2. You may logout from backoffice
3. Login in WebPOS as Vallblanca, check that Organization Variables subentry is available
4. Click on user Vallblanca to the top right, and change Profile to VallBlancaManual and check that Organization Variables subentry is disabled
5. Click Logout and login again as Vallblanca user

Option Organization Variables appears as disabled, although you're connected with a role that has permission to that user action.

Proposed Solution

Additional Information