Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0012256
TypeCategorySeverityReproducibilityDate SubmittedLast Update
design defect[Openbravo ERP] A. Platformminoralways2010-02-14 12:382022-02-01 08:08
ReportericiordiaView Statuspublic 
Assigned ToTriage Platform Base 
PriorityhighResolutionopenFixed in Version
StatusacknowledgedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava versionany
OS VersionanyDatabase versionanyAnt versionany
Product VersionpiSCM revision 
Review Assigned To
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0012256: It is possible to modify others module's (including core) metadata through System datasets in your module

DescriptionIf you include a System dataset in your module in which some core components are modified, when applying your module those core components will be modified, and this way there is a security breach in the rule "modules can not modify other modueles"
Proposed SolutionNot clear, maybe raise an error when importing data if it happens...
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]

-  Notes
(0052506)
AugustoMauch (administrator)
2012-09-24 23:38

Effort: 5
Impact: mid
Plan: short

- Issue History
Date Modified Username Field Change
2010-02-14 12:38 iciordia New Issue
2010-02-14 12:38 iciordia Assigned To => alostale
2010-02-15 15:30 alostale Status new => scheduled
2010-02-15 15:30 alostale fix_in_branch => pi
2011-10-28 20:23 iciordia Type defect => design defect
2011-10-28 20:23 iciordia fix_in_branch pi =>
2012-09-24 23:38 AugustoMauch Note Added: 0052506
2012-09-24 23:38 AugustoMauch Priority urgent => high
2017-03-31 14:36 alostale Status scheduled => acknowledged
2017-04-10 14:35 alostale Assigned To alostale => platform
2022-02-01 08:08 alostale Assigned To platform => Triage Platform Base


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker