Openbravo Issue Tracking System - Retail Modules
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0048693Retail ModulesWeb POSpublic2022-03-01 11:262022-03-16 08:08
Reportermarvintm 
Assigned Torqueralta 
PrioritynormalSeveritymajorReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version 
Target VersionRR22Q1.1Fixed in VersionRR22Q1.1 
Merge Request Status
Review Assigned To
OBNetwork customer
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0048693: MultiServerJSONProcess is disabling the permissions check in all its subclasses
DescriptionCurrently the MultiServerJSONProcess class is disabling the permissions check in all its subclasses by default.

This means that even if a class implements a preference check, this check will not be done and users without access to that preference will be able to use the process.
Steps To Reproduce.
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
blocks defect 0048692 closed rqueralta MultiServerJSONProcess is disabling the permissions check in all its subclasses 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2022-03-01 11:27marvintmTypedefect => backport
2022-03-01 11:27marvintmTarget Version => RR22Q1.1
2022-03-04 05:30hgbotNote Added: 0135442
2022-03-04 18:20rqueraltaAssigned ToRetail => rqueralta
2022-03-16 08:08hgbotResolutionopen => fixed
2022-03-16 08:08hgbotStatusscheduled => closed
2022-03-16 08:08hgbotFixed in Version => RR22Q1.1
2022-03-16 08:08hgbotNote Added: 0135761
2022-03-16 08:08hgbotNote Added: 0135762

Notes
(0135442)
hgbot   
2022-03-04 05:30   
Merge Request created: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/merge_requests/341 [^]
(0135761)
hgbot   
2022-03-16 08:08   
Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core [^]
Changeset: c93048a97894897ae4d7a07327d9742699a3de76
Author: Rafael Queralta <rafaelcuba81@gmail.com>
Date: 03-03-2022 17:40:12
URL: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/commit/c93048a97894897ae4d7a07327d9742699a3de76 [^]

Fixed BUG-48693: Due to security issues, was removed the overrided methods bypassSecurity and bypassPreferenceCheck in MultiServerJSONProcess class

---
M src/org/openbravo/mobile/core/servercontroller/MultiServerJSONProcess.java
---
(0135762)
hgbot   
2022-03-16 08:08   
Merge request merged: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/merge_requests/341 [^]