Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0009979Openbravo ERPC. Securitypublic2009-07-21 12:092009-08-18 00:00
Reporternetworkb 
Assigned Toalostale 
PriorityimmediateSeveritymajorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version2.40MP7 
Target VersionFixed in Versionpi 
Merge Request Status
Review Assigned To
OBNetwork customerOBPS
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0009979: Linked items show elements in windows where the role has no permission
DescriptionFor example, a role is created only to access to Business Partner window.
A user access the application with this role.
Go to Business Partner, and select an existing one.
Press Linked items, and shows information, for example, about Manual settlement.
This is not correct. It must only show information about those elements that role can navigate.
Steps To Reproduce1)Create a Business partner.
Select as Employee.
Go to Manual Settlement. Create a new one.
In Create payment tab, select the partner in 1). As amount, 1000.
Go to Balance payment, select one GL/Item, and enter 1000 as debit amount.
Process it.
Back to Business partner window. Press linked items. The manual settlement is shown (it is supposed that role can access to Manual Settlement)
-------------------
Create a new role, just to access Business partner window.
Create a new user for this role.
Enter as this user.
Go to Business Partner window. Find the partner created in 1)
Press Linked items. Pop-up shows a link to Manual Settlement, including its amount. This must not happen
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
related to defect 00097052.50MP4 closed sathiyan The employees have acces to their payroll 
depends on backport 0009981 closed alostale Linked items show elements in windows where the role has no permission 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2009-07-21 12:09networkbNew Issue
2009-07-21 12:09networkbAssigned To => rafaroda
2009-07-21 12:09networkbOBNetwork customer => Yes
2009-07-21 12:31rafarodaNote Added: 0018479
2009-07-21 12:31rafarodaAssigned Torafaroda => alostale
2009-07-21 12:41rafarodaStatusnew => scheduled
2009-07-21 12:41rafarodafix_in_branch => pi
2009-07-21 13:41rafarodaRelationship addedrelated to 0009705
2009-07-21 17:31hgbotCheckin
2009-07-21 17:31hgbotNote Added: 0018499
2009-07-21 17:31hgbotStatusscheduled => resolved
2009-07-21 17:31hgbotResolutionopen => fixed
2009-07-21 17:31hgbotFixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/53febb6b06a577ec5ea8ff539e27f1edab94a0b9 [^]
2009-08-17 14:08sureshbabuStatusresolved => closed
2009-08-17 14:08sureshbabuNote Added: 0018976
2009-08-17 14:08sureshbabuFixed in Version => pi
2009-08-18 00:00anonymoussf_bug_id0 => 2839265

Notes
(0018479)
rafaroda   
2009-07-21 12:31   
Asier, can you please take action on this issue?

Thanks.
(0018499)
hgbot   
2009-07-21 17:31   
Repository: erp/devel/pi
Changeset: 53febb6b06a577ec5ea8ff539e27f1edab94a0b9
Author: Asier Lostalé <asier.lostale <at> openbravo.com>
Date: Tue Jul 21 17:15:25 2009 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/53febb6b06a577ec5ea8ff539e27f1edab94a0b9 [^]

fixed bug 0009979: Linked items show elements in windows where the role has no permission

---
M src/org/openbravo/erpCommon/utility/UsedByLink.java
M src/org/openbravo/erpCommon/utility/UsedByLink_data.xsql
---
(0018976)
sureshbabu   
2009-08-17 14:08   
system throws warning message as Warning: There are non accessible records