Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0054685Openbravo ERPA. Platformpublic2024-02-15 13:342024-02-15 13:41
shuehner 
shuehner 
normalminorhave not tried
newopen 
5
 
 
Core
No
0054685: Do not persist access fo widget classes having Allow Anonymous Access
Issue 53408 in 24Q1 release stopped persisting _ACCESS entries for role marked as automatic. Instead that case is handled in code automatically.

Table obkmo_widget_class has a similar flag to mark a widget as available independent of role (allow_anonymous_access).

Similar to 53408 we can remove that auto-generated _access entries as those widget classes will be allowed automatically

See code checking obkmo_widget_class_access for access control here:
https://gitlab.com/openbravo/product/openbravo/-/blob/master/modules/org.openbravo.client.myob/src/org/openbravo/client/myob/MyOpenbravoComponent.java?ref_type=heads#L176 [^]

Starting line 185 all those classes marked as allow_anonymous_access are added as available independent of the roles being manual or automatic.
Remove the _access rows for public widget_classes and persist those changes into sampledata.

delete from obkmo_widget_class_access a where exists (select 1 from obkmo_widget_class c where c.obkmo_widget_class_id = a.obkmo_widget_class_id and c.allow_anonymous_access = 'Y');
No tags attached.
related to defect 0053408 closed ablasco Do not persist access for automatic roles 
Issue History
2024-02-15 13:34shuehnerNew Issue
2024-02-15 13:34shuehnerAssigned To => Triage Platform Base
2024-02-15 13:34shuehnerModules => Core
2024-02-15 13:34shuehnerTriggers an Emergency Pack => No
2024-02-15 13:35shuehnerRelationship addedrelated to 0053408
2024-02-15 13:35shuehnerAssigned ToTriage Platform Base => shuehner
2024-02-15 13:41hgbotNote Added: 0160791

Notes
(0160791)
hgbot   
2024-02-15 13:41   
Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1143 [^]