Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0013350
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] A. Platformmajorhave not tried2010-05-18 09:062010-06-17 00:00
ReportermtaalView Statuspublic 
Assigned Tomtaal 
PrioritynormalResolutionfixedFixed in Version
StatusclosedFix in branchpiFixed in SCM revision1f1c212343cc
ProjectionnoneETAnoneTarget Versionpi
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionpiSCM revision 
Review Assigned To
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0013350: The entity access checker is initialized in the context of the user, gives access denied exception

DescriptionWhen calling an OBDal api the OBContext.getEntityAccessChecker method is initialized in the user context. This gives problems as the entity access checker initialization reads table and other AD information for which a user does not necessarily has access.


 
Proposed SolutionThe entityAccessChecker.initialize method must be run in admin mode
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]

-  Notes
(0027736)
hgbot (developer)
2010-05-26 07:52

Repository: erp/devel/pi
Changeset: 1f1c212343ccd8927dbfdaddb629239cd93ced14
Author: Martin Taal <martin.taal <at> openbravo.com>
Date: Wed May 26 07:52:02 2010 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/1f1c212343ccd8927dbfdaddb629239cd93ced14 [^]

fixes issue 13350: The entity access checker is initialized in the context of the user, gives access denied exception

---
M src/org/openbravo/dal/security/EntityAccessChecker.java
---
(0027929)
hudsonbot (developer)
2010-06-03 22:49

A changeset related to this issue has been promoted to main after passing a series of tests and an OBX has been generated:

Changeset: http://code.openbravo.com/erp/devel/main/rev/1f1c212343cc [^]
Merge Changeset: http://code.openbravo.com/erp/devel/main/rev/c011484a38d9 [^]
Tests: http://builds.openbravo.com/view/int/ [^]
OBX: http://builds.openbravo.com/erp/core/obx/OpenbravoERP-2.50CI.17407.obx [^]
(0028490)
iperdomo (reporter)
2010-06-16 10:35

Tested on pi @ rev ced7876366af

- Issue History
Date Modified Username Field Change
2010-05-18 09:06 mtaal New Issue
2010-05-18 09:06 mtaal Assigned To => mtaal
2010-05-24 08:43 alostale Status new => scheduled
2010-05-24 08:43 alostale fix_in_branch => pi
2010-05-26 07:52 hgbot Checkin
2010-05-26 07:52 hgbot Note Added: 0027736
2010-05-26 07:52 hgbot Status scheduled => resolved
2010-05-26 07:52 hgbot Resolution open => fixed
2010-05-26 07:52 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/1f1c212343ccd8927dbfdaddb629239cd93ced14 [^]
2010-06-03 22:49 hudsonbot Checkin
2010-06-03 22:49 hudsonbot Note Added: 0027929
2010-06-16 10:35 iperdomo Note Added: 0028490
2010-06-16 10:35 iperdomo Status resolved => closed
2010-06-17 00:00 anonymous sf_bug_id 0 => 3017325


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker