Project:
View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
ID | ||||||||
0009705 | ||||||||
Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
defect | [Openbravo ERP] C. Security | major | always | 2009-06-29 15:47 | 2009-08-18 00:00 | |||
Reporter | networkb | View Status | public | |||||
Assigned To | sathiyan | |||||||
Priority | immediate | Resolution | fixed | Fixed in Version | pi | |||
Status | closed | Fix in branch | Fixed in SCM revision | b76fb561da36 | ||||
Projection | none | ETA | none | Target Version | 2.50MP4 | |||
OS | Any | Database | Any | Java version | ||||
OS Version | Database version | Ant version | ||||||
Product Version | 2.40 | SCM revision | ||||||
Merge Request Status | ||||||||
Review Assigned To | ||||||||
OBNetwork customer | OBPS | |||||||
Web browser | ||||||||
Modules | Core | |||||||
Support ticket | ||||||||
Regression level | ||||||||
Regression date | ||||||||
Regression introduced in release | ||||||||
Regression introduced by commit | ||||||||
Triggers an Emergency Pack | No | |||||||
Summary | 0009705: The employees have acces to their payroll | |||||||
Description | Although employees do not have access to Manual settlements they can see their payrolls in different ways: - Master Data Management || Business Partner || Business Partner >> Customer the field "Credit used" has the information about pending payments that are their payrolls. - Sales Management || Transactions || Sales Invoice || Header select business partner. In BP selector appears the same information about credit used. - Master Data Management || Business Partner press linked items and here there are all the manual settlements with amount information linked to this business partner. | |||||||
Steps To Reproduce | There are three different ways: - Master Data Management || Business Partner || Business Partner >> Customer the field "Credit used" has the information about pending payments that are their payrolls. - Sales Management || Transactions || Sales Invoice || Header select business partner. In BP selector appears the same information about credit used. - Master Data Management || Business Partner press linked items and here there are all the manual settlements with amount information linked to this business partner. | |||||||
Proposed Solution | For the two first points, modify: * C_INVOICE_POST procedure in order to update credit used ONLY when it is a sales invoice. * C_SETTLEMENT_POST procedure in order to update credit used ONLY when ISRECEIPT = Y * SE_ORDER_BPARTNER, SL_INOUT_BPARTNER and SE_INVOICE_BPARTNER callouts in order to: ** Display Credit Limit Over message only in sales transactions. ** Display correctly the message as "Note: Credit Limit over by 1157622.42" instead of "Note: Credit Limit over by -1157622.42" where 1157622.42 is the credit available as SO_CreditLimit-SO_CreditUsed The third point will be addressed by defect 0009979 | |||||||
Tags | No tags attached. | |||||||
Attached Files | ||||||||
![]() |
|||||||||||||||
|
![]() |
|
(0017650) psarobe (viewer) 2009-06-29 19:25 |
Sales invoices to payrolls? Please we need a better explanation. Thanks in advance |
(0018012) rafaroda (viewer) 2009-07-08 11:30 |
Reminder sent to: networkb Please provide the feedback required. Thanks. |
(0018327) networkb (viewer) 2009-07-16 16:45 |
The bug is : If a business partner is an employee of the company, can see payrolls in Credit Used. For employees its payrolls amount is the same as Credit Used. This field appears in diferent windows that everybody can access, although they do not have permission to Settlements. |
(0018664) hgbot (developer) 2009-07-28 17:36 |
Repository: erp/devel/pi Changeset: b76fb561da36f575fb80b4bb27ea8afbfe22195c Author: Sathiyan Sivaprakasam <sathiyan.sivaprakasam <at> openbravo.com> Date: Tue Jul 28 21:05:18 2009 +0530 URL: http://code.openbravo.com/erp/devel/pi/rev/b76fb561da36f575fb80b4bb27ea8afbfe22195c [^] Fixes Issue 9705: The employees have access to their payroll --- M src-db/database/model/functions/C_INVOICE_POST.xml M src-db/database/model/functions/C_SETTLEMENT_POST.xml M src/org/openbravo/erpCommon/ad_callouts/SE_Invoice_BPartner.java M src/org/openbravo/erpCommon/ad_callouts/SE_Order_BPartner.java M src/org/openbravo/erpCommon/ad_callouts/SL_InOut_BPartner.java --- |
(0018974) sureshbabu (viewer) 2009-08-17 13:39 |
Tested the first two points listed in the defect. |
![]() |
|||
Date Modified | Username | Field | Change |
2009-06-29 15:47 | networkb | New Issue | |
2009-06-29 15:47 | networkb | Assigned To | => rafaroda |
2009-06-29 15:47 | networkb | OBNetwork customer | => Yes |
2009-06-29 15:49 | networkb | version | 2.50 => 2.40 |
2009-06-29 19:25 | psarobe | Note Added: 0017650 | |
2009-06-29 19:25 | psarobe | Status | new => feedback |
2009-07-08 11:30 | rafaroda | Note Added: 0018012 | |
2009-07-16 16:45 | networkb | Note Added: 0018327 | |
2009-07-16 16:45 | networkb | Status | feedback => new |
2009-07-19 16:29 | psarobe | Status | new => scheduled |
2009-07-19 16:29 | psarobe | fix_in_branch | => pi |
2009-07-21 13:39 | rafaroda | Assigned To | rafaroda => sathiyan |
2009-07-21 13:39 | rafaroda | fix_in_branch | pi => |
2009-07-21 13:39 | rafaroda | Steps to Reproduce Updated | |
2009-07-21 13:41 | rafaroda | Relationship added | related to 0009979 |
2009-07-22 11:32 | sathiyan | Note Added: 0018539 | |
2009-07-22 11:36 | rafaroda | Note Deleted: 0018539 | |
2009-07-28 06:52 | pjuvara | Target Version | => 2.50MP4 |
2009-07-28 17:36 | hgbot | Checkin | |
2009-07-28 17:36 | hgbot | Note Added: 0018664 | |
2009-07-28 17:36 | hgbot | Status | scheduled => resolved |
2009-07-28 17:36 | hgbot | Resolution | open => fixed |
2009-07-28 17:36 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/b76fb561da36f575fb80b4bb27ea8afbfe22195c [^] |
2009-08-17 13:39 | sureshbabu | Status | resolved => closed |
2009-08-17 13:39 | sureshbabu | Note Added: 0018974 | |
2009-08-17 13:39 | sureshbabu | Fixed in Version | => pi |
2009-08-18 00:00 | anonymous | sf_bug_id | 0 => 2839262 |
Copyright © 2000 - 2009 MantisBT Group |