Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0055546
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Modules] Open APIminorhave not tried2024-05-22 09:462024-07-09 12:27
ReportercaristuView Statuspublic 
Assigned ToTriage Platform Conn 
PriorityhighResolutionfixedFixed in Version
StatusclosedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Regression date
Regression introduced by commit
Regression level
Review Assigned To
Regression introduced in release
Summary

0055546: Roles with restricted backend access cannot see the Swagger Doc

DescriptionRoles with restricted backend access cannot are unable to use the Swagger Doc
Steps To Reproduce1) Configure a role with "Restrict backend access" field set as true
2) Set the role configured in step 1) as the default role for a user
3) Try to access to the swagger doc page. Note that an error is displayed, it is not possible to access to the doc.
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]
related to defect 0048976 closedTriage Platform Conn Modules Improve error when accessing to the Swagger Doc with a non authorized role 
related to defect 0055517 closedeugen_hamuraru Openbravo ERP Extra acess required when return full object is enabled on POST Synchronous requests 
related to feature request 0048366 closedcaristu Retail Modules Split Retail API Infrastructure into a new module 
depends on backport 00559541.0.12 closedTriage Platform Conn Modules Roles with restricted backend access cannot see the Swagger Doc 

-  Notes
(0165795)
hgbot (developer)
2024-06-11 12:40

 Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1274 [^]
(0165797)
hgbot (developer)
2024-06-11 12:45

 Merge Request created: https://gitlab.com/openbravo/product/pmods/org.openbravo.service.openapi/-/merge_requests/11 [^]
(0166119)
hgbot (developer)
2024-06-19 19:09

 Merge Request created: https://gitlab.com/openbravo/product/pmods/org.openbravo.api/-/merge_requests/285 [^]
(0166172)
hgbot (developer)
2024-06-20 17:04

 Merge request closed: https://gitlab.com/openbravo/product/pmods/org.openbravo.api/-/merge_requests/285 [^]
(0166182)
hgbot (developer)
2024-06-21 09:49

 Repository: https://gitlab.com/openbravo/product/openbravo [^]
Changeset: 8a963f49cac39f657eaf881aa1ec5b9053804be9
Author: Carlos Aristu <carlos.aristu@openbravo.com>
Date: 21-06-2024 09:15:05
URL: https://gitlab.com/openbravo/product/openbravo/-/commit/8a963f49cac39f657eaf881aa1ec5b9053804be9 [^]

related to BUG-55546: HSAS can define if access to the back office is needed

---
M src/org/openbravo/base/secureApp/DefaultOptions_data.xsql
M src/org/openbravo/base/secureApp/HttpSecureAppServlet.java
M src/org/openbravo/base/secureApp/LoginUtils.java
---
(0166183)
hgbot (developer)
2024-06-21 09:49

 Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1274 [^]
(0166184)
hgbot (developer)
2024-06-21 09:51

 Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/pmods/org.openbravo.service.openapi [^]
Changeset: 1297d50c32ddc853d1385c59fc5c0724151ea0aa
Author: Carlos Aristu <carlos.aristu@openbravo.com>
Date: 21-06-2024 09:32:25
URL: https://gitlab.com/openbravo/product/pmods/org.openbravo.service.openapi/-/commit/1297d50c32ddc853d1385c59fc5c0724151ea0aa [^]

fixes BUG-55546: roles with restricted backend cannot access to swagger

---
M src/org/openbravo/service/openapi/provider/OpenAPIProviderServlet.java
---
(0166185)
hgbot (developer)
2024-06-21 09:51

 Repository: https://gitlab.com/openbravo/product/pmods/org.openbravo.service.openapi [^]
Changeset: 0d4c6efe2d7f03abf099cafc2743acef66d13f87
Author: Carlos Aristu <carlos.aristu@openbravo.com>
Date: 21-06-2024 09:32:30
URL: https://gitlab.com/openbravo/product/pmods/org.openbravo.service.openapi/-/commit/0d4c6efe2d7f03abf099cafc2743acef66d13f87 [^]

related to BUG-55546: use default OB favicon

---
M src/org/openbravo/service/openapi/template/index.html.ftl
---
(0166186)
hgbot (developer)
2024-06-21 09:51

 Merge request merged: https://gitlab.com/openbravo/product/pmods/org.openbravo.service.openapi/-/merge_requests/11 [^]

- Issue History
Date Modified Username Field Change
2024-05-22 09:46 caristu New Issue
2024-05-22 09:46 caristu Assigned To => Triage Platform Conn
2024-05-22 09:46 caristu Issue generated from 0048976
2024-05-22 09:46 caristu Relationship added related to 0048976
2024-05-22 09:46 caristu Relationship added related to 0055517
2024-05-22 09:53 caristu Steps to Reproduce Updated View Revisions
2024-05-22 09:53 caristu Steps to Reproduce Updated View Revisions
2024-06-11 12:40 hgbot Note Added: 0165795
2024-06-11 12:45 hgbot Note Added: 0165797
2024-06-19 12:13 caristu Relationship added related to 0048366
2024-06-19 18:10 hgbot Note Added: 0166118
2024-06-19 19:09 hgbot Note Added: 0166119
2024-06-20 17:04 hgbot Note Added: 0166172
2024-06-21 09:19 hgbot Note Added: 0166178
2024-06-21 09:49 hgbot Note Added: 0166182
2024-06-21 09:49 hgbot Note Added: 0166183
2024-06-21 09:51 hgbot Resolution open => fixed
2024-06-21 09:51 hgbot Status new => closed
2024-06-21 09:51 hgbot Note Added: 0166184
2024-06-21 09:51 hgbot Note Added: 0166185
2024-06-21 09:51 hgbot Note Added: 0166186
2024-06-21 09:52 caristu Note Deleted: 0166178
2024-06-21 09:52 caristu Note Deleted: 0166118
2024-07-09 12:26 alostale Status closed => new
2024-07-09 12:26 alostale Resolution fixed => open
2024-07-09 12:26 alostale Status new => acknowledged
2024-07-09 12:27 alostale Status acknowledged => scheduled
2024-07-09 12:27 alostale Status scheduled => resolved
2024-07-09 12:27 alostale Resolution open => fixed
2024-07-09 12:27 alostale Status resolved => closed

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker