0053749: EDL in initial or processing state indefinitely when role has no access to Import Entry table

Openbravo Issue Tracking System - Openbravo ERP

View Issue Details

Project

Category

View Status

Date Submitted

Last Update

0053749

Openbravo ERP

A. Platform

public

2023-10-11 11:10

2023-10-27 11:43

Reporter

cberner

Assigned To

cberner

Priority

normal

Severity

major

Reproducibility

have not tried

Status

closed

Resolution

fixed

Platform

OS Version

Product Version

Target Version

PR23Q4

Fixed in Version

PR23Q4

Merge Request Status

Review Assigned To

OBNetwork customer

Web browser

Modules

Core

Support ticket

Regression level

Production - QA Approved

Regression date

2023-09-21

Regression introduced in release

PR23Q3

Regression introduced by commit

https://gitlab.com/openbravo/product/openbravo/-/commit/03fa452e48c60b06e2f1a70f29a093bbf07004d0 [^]

Triggers an Emergency Pack

Summary

0053749: EDL in initial or processing state indefinitely when role has no access to Import Entry table

Description

When an EDL is launched by a user role or context that has no access to the C_IMPORT_ENTRY table it fails due to some checks that are done for non-blocking and are not inside Admin Mode contexts.

Steps To Reproduce

Prepare an environment with Web POS and Retail API modules. It is also reproduceable in livebuilds: https://livebuilds.openbravo.com/context/retail_modules_pgsql_pi [^]

1. Login backend as White Valley Admin
2. Go to Role Access window and add a new record for Vall Blanca User.
  - Table: C_IMPORT_ENTRY
  - Excluded: Checked
2.1. Save this record.
3. Go to External System window and add a new record:
  - Name: TestingExtSystem
  - Protocol: HTTP - Backend
3.1. Save and add a new record in subtab HTTP:
  - URL: Add the url generated in this page[1] or a local webserver for testing.
  - Username: anything
  - Password: anything
  - Leave the rest of the fields with default values, then save.
4. Go to Events Subscription window and add a new record:
  - Event: Web POS Order Creation
  - External System: TestingExtSystem
5. Go to EDL Configuration window and add a new record:
  - EDL Process: Send Business API Event
5.1. In subtab Output add a new record with default values and save.
6. Open WebPOS and login as vallblanca user.
7. Add any product to the ticket and try to complete/pay it.
8. Go to backoffice and login as White Valley Admin, then go to the EDL Request window.
9. Check that the request is either in initial or processing and it doesn't change. In tomcat log we will see the following error:
org.openbravo.base.exception.OBSecurityException: Entity C_IMPORT_ENTRY is not directly readable, only id and identifier properties are readable, property C_IMPORT_ENTRY.isnonblocking is neither of these.

[1] https://webhook.site/#!/d6299bb1-4671-47e7-9488-98388cf8d389/a01672e6-9ac1-45f3-937a-4c232243995b/1 [^]

Proposed Solution

Add setAdminMode where required to not fail because of missing permissions on the user launching the EDL.

Additional Information

Tags

No tags attached.

Relationships

caused by	feature request	0052614		closed	cberner	There should be a mechanism to have non-blocking async EDL Requests
blocks	defect	0053639		closed	cberner	EDL in initial or processing state indefinitely when role has no access to Import Entry table