Project:
View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | ||||||||||
ID | |||||||||||
0012256 | |||||||||||
Type | Category | Severity | Reproducibility | Date Submitted | Last Update | ||||||
design defect | [Openbravo ERP] A. Platform | minor | always | 2010-02-14 12:38 | 2022-02-01 08:08 | ||||||
Reporter | iciordia | View Status | public | ||||||||
Assigned To | Triage Platform Base | ||||||||||
Priority | high | Resolution | open | Fixed in Version | |||||||
Status | acknowledged | Fix in branch | Fixed in SCM revision | ||||||||
Projection | none | ETA | none | Target Version | |||||||
OS | Any | Database | Any | Java version | any | ||||||
OS Version | any | Database version | any | Ant version | any | ||||||
Product Version | pi | SCM revision | |||||||||
Review Assigned To | |||||||||||
Web browser | |||||||||||
Modules | Core | ||||||||||
Regression level | |||||||||||
Regression date | |||||||||||
Regression introduced in release | |||||||||||
Regression introduced by commit | |||||||||||
Triggers an Emergency Pack | No | ||||||||||
Summary | 0012256: It is possible to modify others module's (including core) metadata through System datasets in your module | ||||||||||
Description | If you include a System dataset in your module in which some core components are modified, when applying your module those core components will be modified, and this way there is a security breach in the rule "modules can not modify other modueles" | ||||||||||
Proposed Solution | Not clear, maybe raise an error when importing data if it happens... | ||||||||||
Tags | No tags attached. | ||||||||||
Attached Files | |||||||||||
Relationships [ Relation Graph ] [ Dependency Graph ] | |
Notes | |
(0052506) AugustoMauch (administrator) 2012-09-24 23:38 |
Effort: 5 Impact: mid Plan: short |
Issue History | |||
Date Modified | Username | Field | Change |
2010-02-14 12:38 | iciordia | New Issue | |
2010-02-14 12:38 | iciordia | Assigned To | => alostale |
2010-02-15 15:30 | alostale | Status | new => scheduled |
2010-02-15 15:30 | alostale | fix_in_branch | => pi |
2011-10-28 20:23 | iciordia | Type | defect => design defect |
2011-10-28 20:23 | iciordia | fix_in_branch | pi => |
2012-09-24 23:38 | AugustoMauch | Note Added: 0052506 | |
2012-09-24 23:38 | AugustoMauch | Priority | urgent => high |
2017-03-31 14:36 | alostale | Status | scheduled => acknowledged |
2017-04-10 14:35 | alostale | Assigned To | alostale => platform |
2022-02-01 08:08 | alostale | Assigned To | platform => Triage Platform Base |
Copyright © 2000 - 2009 MantisBT Group |