Project:
View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
ID | ||||||||
0010302 | ||||||||
Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
defect | [Openbravo ERP] A. Platform | major | have not tried | 2009-08-17 16:18 | 2009-10-23 00:00 | |||
Reporter | plujan | View Status | public | |||||
Assigned To | alostale | |||||||
Priority | high | Resolution | fixed | Fixed in Version | ||||
Status | closed | Fix in branch | Fixed in SCM revision | 21b69ea05d3e | ||||
Projection | none | ETA | none | Target Version | ||||
OS | Any | Database | Any | Java version | ||||
OS Version | Database version | Ant version | ||||||
Product Version | pi | SCM revision | ||||||
Review Assigned To | ||||||||
Web browser | ||||||||
Modules | Core | |||||||
Regression level | ||||||||
Regression date | ||||||||
Regression introduced in release | ||||||||
Regression introduced by commit | ||||||||
Triggers an Emergency Pack | No | |||||||
Summary | 0010302: Expired OBPS says that users will not be able to log in but they can | |||||||
Description | After an OBPS site license expires, the message shown is "You need to renew the System's Openbravo Professional Subscription. Users will not be able to login, until you do so.". See attach. Anyway, you can log in with no hard limit but only soft limit (you will receive a warning message since first new login but you can login with several users without getting the red error message). | |||||||
Steps To Reproduce | Go to any expired OBPS site and read the message about Subscription Status. Lets assume that user limit is 3. The requirement is that once expired only a single login will be allowed for system administrator task. Instead of this, you can login with more than three users. Everyone will get the warning message but restricted access is never triggered. | |||||||
Proposed Solution | Only a single user is allowed to login after expiration, so the message is correct and some extra verification is missing. | |||||||
Tags | OBPS-Security | |||||||
Attached Files | Expired.GIF [^] (50,718 bytes) 2009-08-17 16:18
| |||||||
Relationships [ Relation Graph ] [ Dependency Graph ] | ||||||||
|
Notes | |
(0021202) hgbot (developer) 2009-10-20 10:56 |
Repository: erp/devel/pi Changeset: 584cfc61ece9194d24e80874d1155a81617afef6 Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Tue Oct 20 10:03:19 2009 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/584cfc61ece9194d24e80874d1155a81617afef6 [^] issue 10302 When the license is expired only System Administrator is allowed to log into the application --- M src-db/database/sourcedata/AD_MESSAGE.xml M src/org/openbravo/base/secureApp/DefaultOptions_data.xsql M src/org/openbravo/base/secureApp/HttpSecureAppServlet.java M src/org/openbravo/base/secureApp/LoginHandler.java M src/org/openbravo/base/secureApp/Seguridad_data.xsql M src/org/openbravo/erpCommon/ad_forms/Role.java M src/org/openbravo/erpCommon/ad_forms/RoleCombo_data.xsql --- |
(0021203) hgbot (developer) 2009-10-20 10:56 |
Repository: erp/devel/pi Changeset: aad744f6a167839199094297cff848fac66154af Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Tue Oct 20 10:55:01 2009 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/aad744f6a167839199094297cff848fac66154af [^] fixed bug 10302: Check also for expired licenses for module not to allow other roles than System to log in. --- M src-db/database/sourcedata/AD_MESSAGE.xml M src/org/openbravo/base/secureApp/HttpSecureAppServlet.java M src/org/openbravo/base/secureApp/LoginHandler.java M src/org/openbravo/erpCommon/ad_forms/Role.java M src/org/openbravo/erpCommon/obps/ActivationKey.java --- |
(0021215) hgbot (developer) 2009-10-20 16:13 |
Repository: erp/devel/pi Changeset: 2c97818848a582313fcc9e66e5680035f5cab1a2 Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Tue Oct 20 11:12:21 2009 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/2c97818848a582313fcc9e66e5680035f5cab1a2 [^] issue 0010302: Prevent NPE when checking expired modules --- M src/org/openbravo/erpCommon/obps/ActivationKey.java --- |
(0021250) hgbot (developer) 2009-10-21 10:44 |
Repository: erp/devel/pi Changeset: 21b69ea05d3ed3caf599b7ab1b66580280d99940 Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Wed Oct 21 10:43:51 2009 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/21b69ea05d3ed3caf599b7ab1b66580280d99940 [^] issue 10302: Do not take into account current session for checking number of active sessions --- M src/org/openbravo/base/secureApp/HttpSecureAppServlet.java M src/org/openbravo/base/secureApp/LoginHandler.java M src/org/openbravo/erpCommon/ad_forms/Role.java M src/org/openbravo/erpCommon/obps/ActivationKey.java --- |
(0021342) alostale (manager) 2009-10-22 16:50 |
Documentation: http://wiki.openbravo.com/wiki/ERP/2.50/Professional_Subscription_Manual#License_Expiration [^] |
Issue History | |||
Date Modified | Username | Field | Change |
2009-08-17 16:18 | plujan | New Issue | |
2009-08-17 16:18 | plujan | Assigned To | => rafaroda |
2009-08-17 16:18 | plujan | File Added: Expired.GIF | |
2009-08-17 16:31 | plujan | Tag Attached: OBPS-Security | |
2009-08-18 15:34 | rafaroda | Assigned To | rafaroda => alostale |
2009-08-18 15:34 | rafaroda | Priority | normal => high |
2009-08-18 15:34 | rafaroda | Severity | minor => major |
2009-08-18 15:34 | rafaroda | Status | new => scheduled |
2009-08-18 18:53 | plujan | Description Updated | |
2009-08-18 18:53 | plujan | Proposed Solution updated | |
2009-08-18 18:53 | plujan | Steps to Reproduce Updated | |
2009-10-20 10:52 | alostale | Relationship added | related to 0011047 |
2009-10-20 10:56 | hgbot | Checkin | |
2009-10-20 10:56 | hgbot | Note Added: 0021202 | |
2009-10-20 10:56 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/584cfc61ece9194d24e80874d1155a81617afef6 [^] |
2009-10-20 10:56 | hgbot | Checkin | |
2009-10-20 10:56 | hgbot | Note Added: 0021203 | |
2009-10-20 10:56 | hgbot | Status | scheduled => resolved |
2009-10-20 10:56 | hgbot | Resolution | open => fixed |
2009-10-20 10:56 | hgbot | Fixed in SCM revision | http://code.openbravo.com/erp/devel/pi/rev/584cfc61ece9194d24e80874d1155a81617afef6 [^] => http://code.openbravo.com/erp/devel/pi/rev/aad744f6a167839199094297cff848fac66154af [^] |
2009-10-20 16:13 | hgbot | Checkin | |
2009-10-20 16:13 | hgbot | Note Added: 0021215 | |
2009-10-20 16:13 | hgbot | Fixed in SCM revision | http://code.openbravo.com/erp/devel/pi/rev/aad744f6a167839199094297cff848fac66154af [^] => http://code.openbravo.com/erp/devel/pi/rev/2c97818848a582313fcc9e66e5680035f5cab1a2 [^] |
2009-10-21 10:44 | hgbot | Checkin | |
2009-10-21 10:44 | hgbot | Note Added: 0021250 | |
2009-10-21 10:44 | hgbot | Fixed in SCM revision | http://code.openbravo.com/erp/devel/pi/rev/2c97818848a582313fcc9e66e5680035f5cab1a2 [^] => http://code.openbravo.com/erp/devel/pi/rev/21b69ea05d3ed3caf599b7ab1b66580280d99940 [^] |
2009-10-22 11:21 | plujan | Status | resolved => closed |
2009-10-22 16:50 | alostale | Note Added: 0021342 | |
2009-10-23 00:00 | anonymous | sf_bug_id | 0 => 2884245 |
Copyright © 2000 - 2009 MantisBT Group |