0008552: Openbravo user should be removed/deactivated

Openbravo Issue Tracking System - Openbravo ERP

View Issue Details

Project

Category

View Status

Date Submitted

Last Update

0008552

Openbravo ERP

C. Security

public

2009-04-12 13:33

2009-05-22 19:36

Reporter

roklenardic

Assigned To

iciordia

Priority

normal

Severity

major

Reproducibility

always

Status

new

Resolution

open

Platform

OS Version

Ubuntu 9.04

Product Version

2.50beta

Target Version

Fixed in Version

Merge Request Status

Review Assigned To

OBNetwork customer

Web browser

Modules

Core

Support ticket

Regression level

Regression date

Regression introduced in release

Regression introduced by commit

Triggers an Emergency Pack

Summary

0008552: Openbravo user should be removed/deactivated

Description

Openbravo user has the following issues:
- it contains access to System Administrator role and Big/SmallBazaar admin roles
- it receives admin and user roles of any new clients created using the Initial client setup
- the above issues considerably confuse people/students starting to use OpenbravoERP. Moreover, there should be no superuser that has access to System Admin and Client user role(s)

Steps To Reproduce

Proposed Solution

Since Big/SmallBazaar as well as the application dictionary already has lots of data that points to Openbravo user (AD_USER_ID=100), the user should have all its roles removed and the user itself should be deactivated.

Instead, user System (password System) should be used to create any System Admin tasks and all new clients receive their own users+roles (e.g. username ClientAdmin with password ClientAdmin)

Additional Information