0001022: Role access. AD_Window_TRG

Description

Whenever you develope a new window, the Trigger "AD_Window_TRG" that is on the table "AD_Window" gives you access to all the roles that exist in the aplication.

The part of the code is :

INTO AD_Window_Access
    (
      AD_Window_ID, AD_Role_ID, AD_Client_ID,
      AD_Org_ID, IsActive, Created,
      CreatedBy, Updated, UpdatedBy,
      IsReadWrite
    )
  SELECT DISTINCT :new.AD_Window_ID,
    r.AD_Role_ID, r.AD_CLIENT_ID, r.AD_ORG_ID,
     'Y', SysDate, 0,
    SysDate, 0, 'Y'
  FROM AD_Role r;

This is wrong because you may develope the new window just for an especific role (Sales department) and suddenly all the roles can see it.

Now you have to go throw all the roles and delete the access.

Tags

No tags attached.

Attached Files

Relationships [ Relation Graph ] [ Dependency Graph ]

Notes
(0000852) alostale (manager) 2007-03-13 09:06 edited on: 2008-06-12 09:18	Logged In: YES user_id=1500722 Originator: NO When a window is created access will be granted only to those roles that are defined as manual='N' instead of to every one. When "manual" field is checked means that access to that role will be manually given if it is not it will be automatically given. In addition to windows I've modified to have the same behavior: form process workflow -- fixed on r2.30

(0004611) user71 2005-06-01 00:00 edited on: 2008-06-12 09:43	This bug was originally reported in SourceForge bug tracker and then migrated to Mantis. You can see the original bug report in: https://sourceforge.net/support/tracker.php?aid=1679119 [^]

Issue History
Date Modified	Username	Field	Change