Openbravo Issue Tracking System - Retail Modules
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0048694Retail ModulesWeb POSpublic2022-03-01 11:262022-03-16 08:08
Reportermarvintm 
Assigned Torqueralta 
PrioritynormalSeveritymajorReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version 
Target VersionRR21Q4.4Fixed in VersionRR21Q4.4 
Merge Request Statusapproved
Review Assigned To
OBNetwork customerNo
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0048694: MultiServerJSONProcess is disabling the permissions check in all its subclasses
DescriptionCurrently the MultiServerJSONProcess class is disabling the permissions check in all its subclasses by default.

This means that even if a class implements a preference check, this check will not be done and users without access to that preference will be able to use the process.
Steps To Reproduce.
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
blocks defect 0048692 closed rqueralta MultiServerJSONProcess is disabling the permissions check in all its subclasses 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2022-03-01 11:27marvintmTypedefect => backport
2022-03-01 11:27marvintmTarget Version => RR21Q4.4
2022-03-03 23:44hgbotMerge Request Status => open
2022-03-03 23:44hgbotNote Added: 0135441
2022-03-04 18:20rqueraltaAssigned ToRetail => rqueralta
2022-03-16 08:08hgbotMerge Request Statusopen => approved
2022-03-16 08:08hgbotNote Added: 0135759
2022-03-16 08:08hgbotResolutionopen => fixed
2022-03-16 08:08hgbotStatusscheduled => closed
2022-03-16 08:08hgbotFixed in Version => RR21Q4.4
2022-03-16 08:08hgbotNote Added: 0135760

Notes
(0135441)
hgbot   
2022-03-03 23:44   
Merge Request created: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/merge_requests/340 [^]
(0135759)
hgbot   
2022-03-16 08:08   
Merge request merged: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/merge_requests/340 [^]
(0135760)
hgbot   
2022-03-16 08:08   
Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core [^]
Changeset: 10ff7dd850f9107c9c997a7f159a81cd662bf254
Author: Rafael Queralta <rafaelcuba81@gmail.com>
Date: 03-03-2022 12:42:18
URL: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/commit/10ff7dd850f9107c9c997a7f159a81cd662bf254 [^]

Fixed BUG-48694: Due to security issues, was removed the overrided methods bypassSecurity and bypassPreferenceCheck in MultiServerJSONProcess class

---
M src/org/openbravo/mobile/core/servercontroller/MultiServerJSONProcess.java
---