Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0008372Openbravo ERPB. User interfacepublic2009-04-01 09:262009-04-25 00:00
Reporterareefbasha 
Assigned Toareefbasha 
PriorityurgentSeveritymajorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS20OS VersionCentOs 5.2
Product Versionpi 
Target VersionFixed in Version2.50MP1 
Merge Request Status
Review Assigned To
OBNetwork customer
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0008372: Reports shows data of all organizations
DescriptionIn the following reports, if you don't select any organization, all data are shown, independently of organizations that user conected has access

1) Purchase Invoice Dimensional Report
2) Material Receipts Dimensional Report
3) Purchase Dimensional Report
4) Shipments Dimensional Report
5) Sales Order Returns Dimensional Report
6) Sales Dimensional Report
7) Invoices Tax Report
Steps To Reproduceuser1 only has access to org1
user2 only has access to org2

create invoice in org1
access to OpenbravoERP with user2 and execute sales invoice dimensional report with combo "Organization" void.

The problem is that, if filter is left blank, organization 0 (and all its sub-organizations tree) is taken by default and causes this wrong filtering.
Proposed SolutionThe proposed solution is the following: if a user leaves the Organization combo-box blank, the report will be filtered by the organization (and sub-organizations tree) the user is logged with.

For the technical solution see 8343(Fixed in SCM revision).
Additional Information
Tagsmain
Relationships
related to defect 0008343 closed areefbasha Report dimensional invoice shows invoices of all organizations 
depends on backport 0008394 closed areefbasha Reports shows data of all organizations 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2009-04-01 09:26areefbashaNew Issue
2009-04-01 09:26areefbashaAssigned To => rafaroda
2009-04-01 09:26areefbashaRegression testing => No
2009-04-01 09:55pjuvaraNote Added: 0015101
2009-04-01 09:55pjuvaraStatusnew => feedback
2009-04-01 09:56pjuvaraNote Added: 0015102
2009-04-01 09:56pjuvaraPrioritynormal => urgent
2009-04-01 09:56pjuvaraSeveritytrivial => major
2009-04-01 10:58areefbashaversion => pi
2009-04-02 09:35rafarodaAssigned Torafaroda => sathiyan
2009-04-02 09:35rafarodaStatusfeedback => scheduled
2009-04-02 09:35rafarodafix_in_branch => pi
2009-04-02 09:35rafarodaRelationship addedrelated to 0008343
2009-04-02 11:35sathiyanAssigned Tosathiyan => vinothbabu
2009-04-02 11:45sathiyanAssigned Tovinothbabu => areefbasha
2009-04-07 10:55areefbashafix_in_branchpi =>
2009-04-07 10:55areefbashaDescription Updated
2009-04-07 11:57areefbashaDescription Updated
2009-04-08 06:51areefbashaDescription Updated
2009-04-09 07:08hgbotCheckin
2009-04-09 07:08hgbotNote Added: 0015297
2009-04-09 07:08hgbotStatusscheduled => resolved
2009-04-09 07:08hgbotResolutionopen => fixed
2009-04-09 07:08hgbotFixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/89bb61b36cb49159382d7808c8a95910f7c43eb8 [^]
2009-04-22 11:23psarobeTag Attached: main
2009-04-24 11:27sureshbabuStatusresolved => closed
2009-04-24 11:27sureshbabuNote Added: 0015679
2009-04-24 11:27sureshbabuFixed in Version => main
2009-04-25 00:00anonymoussf_bug_id0 => 2780814

Notes
(0015101)
pjuvara   
2009-04-01 09:55   
Please specify the product version.
(0015102)
pjuvara   
2009-04-01 09:56   
This appears to be a major issue as it could result in users having access to data that they are not authorized to see.
(0015297)
hgbot   
2009-04-09 07:08   
Repository: erp/devel/pi
Changeset: 89bb61b36cb49159382d7808c8a95910f7c43eb8
Author: Areef Basha <areef.basha <at> openbravo.com>
Date: Thu Apr 09 10:35:27 2009 -0400
URL: http://code.openbravo.com/erp/devel/pi/rev/89bb61b36cb49159382d7808c8a95910f7c43eb8 [^]

Fixes bug 8372: Reports shows data of all organizations.
Now the report will be filtered by the organization (and sub-organizations tree) the user is logged with.

---
M src/org/openbravo/erpCommon/ad_reports/ReportInvoiceVendorDimensionalAnalysesJR.java
M src/org/openbravo/erpCommon/ad_reports/ReportMaterialDimensionalAnalysesJR.java
M src/org/openbravo/erpCommon/ad_reports/ReportPurchaseDimensionalAnalysesJR.java
M src/org/openbravo/erpCommon/ad_reports/ReportRefundSalesDimensionalAnalyses.java
M src/org/openbravo/erpCommon/ad_reports/ReportRefundSalesDimensionalAnalysesPDF.java
M src/org/openbravo/erpCommon/ad_reports/ReportSalesDimensionalAnalyzeJR.java
M src/org/openbravo/erpCommon/ad_reports/ReportShipmentDimensionalAnalyzeJR.java
M src/org/openbravo/erpCommon/ad_reports/ReportTaxInvoiceJR.java
---
(0015679)
sureshbabu   
2009-04-24 11:27   
Tested working fine