0044787: Background processes defined at System only shouldn't be available outside System

Description

When a background process is defined at System level it can be scheduled in any client within the environment.

This is wrong, and it should only be available at the System client. In fact, ideally, the System level Process Requests and the associated Process Monitor records should NOT be visible outside the System client.

Steps To Reproduce

Log in https://livebuilds.openbravo.com/retail_modules_pgsql_pi/ [^]

Change role to F&B Admin

Go to Process Request window and search for the already scheduled French Fiscal Security Background. The record is available, and even the Unschedule Process button. This is wrong and the record should be hidden from the grid.

Go to Process Monitor tab and open any record and check the log contains information about other clients, which could compromise the privacy in a multitenancy environment. Ideally, the Process Request should be hidden so the Process Monitors records shouldn't be available neither.

Proposed Solution

Check the data access visibility to show/hide process request and to schedule/unschedule them

Tags

No tags attached.

Attached Files

Relationships [ Relation Graph ] [ Dependency Graph ]

related to

defect

0044783

closed

vmromanos

Modules

Replace client's name by client's ID in the French Fiscal Security Background

Notes
There are no notes attached to this issue.

Issue History
Date Modified	Username	Field	Change
2020-08-11 14:09	vmromanos	New Issue
2020-08-11 14:09	vmromanos	Assigned To	=> platform
2020-08-11 14:09	vmromanos	Modules	=> Core
2020-08-11 14:09	vmromanos	Triggers an Emergency Pack	=> No
2020-08-11 14:09	vmromanos	Relationship added	related to 0044783
2022-02-01 07:24	alostale	Assigned To	platform => Triage Platform Base