Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0009981Openbravo ERPC. Securitypublic2009-07-21 12:092009-07-22 12:28
Reporternetworkb 
Assigned Toalostale 
PriorityimmediateSeveritymajorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version2.40MP7 
Target VersionFixed in Version2.40MP8 
Merge Request Status
Review Assigned To
OBNetwork customerOBPS
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0009981: Linked items show elements in windows where the role has no permission
DescriptionFor example, a role is created only to access to Business Partner window.
A user access the application with this role.
Go to Business Partner, and select an existing one.
Press Linked items, and shows information, for example, about Manual settlement.
This is not correct. It must only show information about those elements that role can navigate.
Steps To Reproduce1)Create a Business partner.
Select as Employee.
Go to Manual Settlement. Create a new one.
In Create payment tab, select the partner in 1). As amount, 1000.
Go to Balance payment, select one GL/Item, and enter 1000 as debit amount.
Process it.
Back to Business partner window. Press linked items. The manual settlement is shown (it is supposed that role can access to Manual Settlement)
-------------------
Create a new role, just to access Business partner window.
Create a new user for this role.
Enter as this user.
Go to Business Partner window. Find the partner created in 1)
Press Linked items. Pop-up shows a link to Manual Settlement, including its amount. This must not happen
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
related to backport 00099502.50MP4 closed sathiyan The employees have acces to their payroll 
blocks defect 0009979 closed alostale Linked items show elements in windows where the role has no permission 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2009-07-21 12:41rafarodaTypedefect => backport
2009-07-21 12:41rafarodafix_in_branch => 2.40
2009-07-21 13:40rafarodaRelationship addedrelated to 0009950
2009-07-21 17:42hgbotCheckin
2009-07-21 17:42hgbotNote Added: 0018504
2009-07-21 17:42hgbotStatusscheduled => resolved
2009-07-21 17:42hgbotResolutionopen => fixed
2009-07-21 17:42hgbotFixed in SCM revision => http://code.openbravo.com/erp/stable/2.40/rev/01efdf924dc1b13f52370daf42f465d6d57fa1ca [^]
2009-07-22 12:28sureshbabuStatusresolved => closed
2009-07-22 12:28sureshbabuNote Added: 0018548
2009-07-22 12:28sureshbabuFixed in Version => 2.40MP8

Notes
(0018504)
hgbot   
2009-07-21 17:42   
Repository: erp/stable/2.40
Changeset: 01efdf924dc1b13f52370daf42f465d6d57fa1ca
Author: Asier Lostalé <asier.lostale <at> openbravo.com>
Date: Tue Jul 21 17:42:10 2009 +0200
URL: http://code.openbravo.com/erp/stable/2.40/rev/01efdf924dc1b13f52370daf42f465d6d57fa1ca [^]

fixed bug 0009981: Linked items show elements in windows where the role has no permission

---
M src/org/openbravo/erpCommon/utility/UsedByLink.java
M src/org/openbravo/erpCommon/utility/UsedByLink_data.xsql
---
(0018548)
sureshbabu   
2009-07-22 12:28   
Tested working fine