0040701: use bind-parameters in FactLine

Description

FactLine.getDescription method is generating a sql setting parameters by String concatenation, replace tokens by bind parameters.

Steps To Reproduce

Proposed Solution

If query can be executed in Dal transaction can be done as:

        strSql = strSql.replaceAll("@RecordId@", ":recordId").replaceAll("@Line@", ":lineId");
        description.append(OBDal.getInstance().getSession()
            .createNativeQuery(strSql)
            .setParameter("lineId", localStrLine)
            .setParameter("recordId", strRecord_ID)
            .uniqueResult());

Tags

No tags attached.

Attached Files

Relationships [ Relation Graph ] [ Dependency Graph ]

blocks

defect

0040523

closed

nonofrancisco

use bind-parameters in FactLine

Notes
(0111470) vmromanos (manager) 2019-05-03 11:58	There is no need to backport to 18Q4 since 19Q1.1 is going to be promoted to CS very soon

Issue History
Date Modified	Username	Field	Change
2019-04-29 13:34	nonofrancisco	Type	defect => backport
2019-04-29 13:34	nonofrancisco	Target Version	=> 3.0PR18Q4.4
2019-05-03 11:58	vmromanos	Review Assigned To	=> vmromanos
2019-05-03 11:58	vmromanos	Note Added: 0111470
2019-05-03 11:58	vmromanos	Status	scheduled => closed