Openbravo Issue Tracking System - POS2
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0054753POS2Corepublic2024-02-23 10:082024-03-06 17:42
Reportercaristu 
Assigned ToTriage Platform Base 
PriorityhighSeveritymajorReproducibilityhave not tried
StatusnewResolutionopen 
PlatformOS5OS Version
Product Version 
Target VersionFixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customer
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0054753: Missing SecuredJSONProcess securization based on user actions
DescriptionIt is needed to add a securization mechanism to determine the users that can execute a SecuredJSONProcess based in the user action access.

In "old" POS this securization was done through preferences[1], but in core2 applications the user actions is the standard way to provide access to the application features.

[1] https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/blob/master/src/org/openbravo/mobile/core/process/SecuredJSONProcess.java?ref_type=heads#L173 [^]
Steps To Reproduce.
Proposed SolutionAdd a way to define the UserActions associated to a SecuredJSONProcess and allow the execution of the process only if the user is allowed to execute the UserAction.
Additional Information
TagsNo tags attached.
Relationships
related to defect 0054527 closed caristu Retail Modules You can't use Reprintable Documents in POS with an user with a Manual Role 
related to feature request 0054537 closed caristu Modules Support authenticating users with Web Authentication (phase 1) 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2024-02-23 10:08caristuNew Issue
2024-02-23 10:08caristuAssigned To => caristu
2024-02-23 10:08caristuIssue generated from0054537
2024-02-23 10:08caristuRelationship addeddepends on 0054537
2024-02-23 10:13caristuDescription Updatedbug_revision_view_page.php?rev_id=27584#r27584
2024-02-26 16:03caristuRelationship deleteddepends on 0054537
2024-02-26 16:04caristuRelationship addedrelated to 0054527
2024-02-26 16:06caristuSummarySupport authenticating users with Web Authentication (phase 2) => Missing SecuredJSONProcess securization based on user actions
2024-02-26 16:06caristuDescription Updatedbug_revision_view_page.php?rev_id=27591#r27591
2024-02-26 16:06caristuProposed Solution updated
2024-02-26 16:08caristuDescription Updatedbug_revision_view_page.php?rev_id=27592#r27592
2024-02-26 16:08caristuProjectModules => POS2
2024-02-26 16:08caristuTriggers an Emergency Pack => No
2024-02-26 16:08caristuCategoryWeb Authentication => Core
2024-02-26 16:08caristuAssigned Tocaristu => Triage Platform Base
2024-02-28 09:29caristuSeverityminor => major
2024-02-28 09:29caristuTypefeature request => defect
2024-03-06 17:42caristuRelationship addedrelated to 0054537

There are no notes attached to this issue.