Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0056759
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] A. Platformminorhave not tried2024-10-14 09:062024-11-10 22:51
ReporteralostaleView Statuspublic 
Assigned Tojarmendariz 
PrioritynormalResolutionfixedFixed in VersionPR25Q1
StatusclosedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Statusapproved
Review Assigned To
OBNetwork customerGold
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0056759: active sessions for locked users are usable till log out

DescriptionAfter locking a user account, active sessions for that account can continue operating till they log out.
Steps To Reproduce1. Session-1: Log in POS with demouser user
2. Session-2: Log in backoffice with Openbravo user
3. Session-2: In User window, look for demouser and flag the Locked field
4. Session-1: Complete a sale
  ERROR: it successfully completes it, it would be expectable the demouser sessions finalizes as the user is locked
Proposed SolutionThe easiest way to implement this is to set ad_session.session_active='N' where session_active='Y' and ad_user=:lockedUser.

This causes the next time any backend action is performed, Tomcat session to be kicked out. Working also in a Tomcat cluster.
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]

-  Notes
(0171456)
hgbot (developer)
2024-11-05 18:47

Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1426 [^]
(0171730)
hgbot (developer)
2024-11-10 22:51

Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1426 [^]
(0171731)
hgbot (developer)
2024-11-10 22:51

Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/openbravo [^]
Changeset: 137385055c039244795b0a1b515af20c66ee7d95
Author: Augusto Mauch <amauch@orisha.com>
Date: 10-11-2024 21:46:54
URL: https://gitlab.com/openbravo/product/openbravo/-/commit/137385055c039244795b0a1b515af20c66ee7d95 [^]

Fixes ISSUE-56759: Automatically deactivate sessions of locked users

---
A src/org/openbravo/authentication/DeactivateSessionOnUserLockEventHandler.java
---

- Issue History
Date Modified Username Field Change
2024-10-14 09:06 alostale New Issue
2024-10-14 09:06 alostale Assigned To => Triage Platform Base
2024-10-14 09:06 alostale OBNetwork customer => Gold
2024-10-14 09:06 alostale Modules => Core
2024-10-14 09:06 alostale Triggers an Emergency Pack => No
2024-11-05 18:47 hgbot Merge Request Status => open
2024-11-05 18:47 hgbot Note Added: 0171456
2024-11-05 18:51 AugustoMauch Assigned To Triage Platform Base => jarmendariz
2024-11-05 18:51 AugustoMauch Status new => scheduled
2024-11-10 22:47 hgbot Merge Request Status open => approved
2024-11-10 22:51 hgbot Resolution open => fixed
2024-11-10 22:51 hgbot Status scheduled => closed
2024-11-10 22:51 hgbot Note Added: 0171730
2024-11-10 22:51 hgbot Fixed in Version => PR25Q1
2024-11-10 22:51 hgbot Note Added: 0171731


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker