Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0008290Openbravo ERP07. Sales managementpublic2009-03-25 13:082009-03-27 00:00
networkb 
iperdomo 
immediateminoralways
closedno change required 
5
2.35MP10 
 
OBPS
Core
No
0008290: A sales order of an organization is seen in edition view when logged in another organization. ONLY with Internet Explorer
Using INTERNET EXPLORER browser you are able to see a sales order belonged to an organization (in edition view) when you are logged with a user who belongs to another different organization.
In an installation with at least 2 different organizations:
1. login with the user of one of the organizations
2. go to sales management || transactions || sales order || header
3. check that the sales order belongs to the organization which the user belongs
4. logout
5. login with the user of the other organization
6. go to sales management || transactions || sales order || header
7. check that the sales order showed belongs to the previous organization

That only happens using INTERNET EXPLORER.
No tags attached.
depends on backport 0008306 closed iperdomo A sales order of an organization is seen in edition view when logged in another organization. ONLY with Internet Explorer 
depends on backport 0008307 closed iperdomo A sales order of an organization is seen in edition view when logged in another organization. ONLY with Internet Explorer 
jpg SOorg.jpg (545,049) 2009-03-25 13:08
https://issues.openbravo.com/file_download.php?file_id=1072&type=bug
Issue History
2009-03-25 13:08networkbNew Issue
2009-03-25 13:08networkbAssigned To => rafaroda
2009-03-25 13:08networkbFile Added: SOorg.jpg
2009-03-25 13:08networkbOBNetwork customer => Yes
2009-03-25 13:08networkbRegression testing => No
2009-03-25 18:10iciordiaNote Added: 0014967
2009-03-25 18:10iciordiaStatusnew => feedback
2009-03-26 13:13iperdomoStatusfeedback => scheduled
2009-03-26 13:13iperdomoAssigned Torafaroda => iperdomo
2009-03-26 13:13iperdomofix_in_branch => pi
2009-03-26 13:16iperdomoRelationship addeddepends on 0008307
2009-03-26 13:16iperdomoStatusscheduled => closed
2009-03-26 13:16iperdomoResolutionopen => no change required
2009-03-26 13:19iperdomoNote Added: 0015008
2009-03-27 00:00anonymoussf_bug_id0 => 2715671

Notes
(0014967)
iciordia   
2009-03-25 18:10   
Hi,

i did try to reproduce the issue using Windows XP, Internet Explorer 7
and was not able to reproduce.

When entering as Openravo and go to Sales Order is see directly a record
belonging to montblanc so correct.

Logging out and re-logging in as simulacion i see not record in Sales
Order by default. Removing the default-fiter (opening search popup,
clicking ok) show 57 rows and all belong to client: Productos montblanc
and organisation: simulacion which are the values specified to the
role/user: simulacion. Which looks correct to me

Could someone re-test or explain how to reproduce the broken behavior?

Regards,
Stefan
(0015008)
iperdomo   
2009-03-26 13:19   
This issue is not reproducible in pi, because the requests to the backend are now always through POST. In 2.40 and 2.35 when you click a menu item to see a window, you do it using GET request, IE sometimes doesn't make the request, and shows the page in the cache.