Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0013683
TypeCategorySeverityReproducibilityDate SubmittedLast Update
design defect[Openbravo ERP] A. Platformminorhave not tried2010-06-17 13:162022-02-01 08:08
ReporteriperdomoView Statuspublic 
Assigned ToTriage Platform Base 
PriorityhighResolutionopenFixed in Version
StatusacknowledgedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSLinux 32 bitDatabasePostgreSQLJava version1.6.0_15
OS Version2.6.30-gentoo-r5Database version8.3.8Ant version1.7.1
Product VersionpiSCM revision 
Review Assigned To
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0013683: Review/Fix LoginUtils.fillSessionArguments function

DescriptionThe fillSessionArguments executed in 2 cases:
* In the login process just after validating the username/password
* Using the change role window, where you can change the user's role, client, organization, etc

This function returns false when something went wrong trying to complete one of the steps in the process, changing a OBContext or setting one of the required session values.

In the login process when fillSessionArguments returns false, the process redirects to logout directly. This is correct and not a problem.

The problem is when changing role. Since the changes inside are not atomic (one transaction) the OBContext could be changed and non of the session variables reset or set the new ones. The process prompts an error message to the user, but the state is inconsistent, the OBContext is changed so, some DAL based process could use the _new_ context, where some of the session variables are using the _old_ state.
Proposed SolutionThe fillSessionArguments should be atomic, with the possibility to rollback the previous state on an error. This is a problem just when changing role using the 'Change Role' window.
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]
related to defect 00136502.50MP19 closediperdomo The preferences are not loaded when accessing the application. 

-  Notes
(0052490)
AugustoMauch (administrator)
2012-09-24 23:33

Effort: 1
Impact: low
Plan: short

- Issue History
Date Modified Username Field Change
2010-06-17 13:16 iperdomo New Issue
2010-06-17 13:16 iperdomo Assigned To => alostale
2010-06-17 13:17 iperdomo Relationship added related to 0013650
2010-06-17 13:22 shuehner Issue Monitored: shuehner
2010-06-23 10:41 alostale Status new => scheduled
2012-06-12 15:48 alostale Type defect => design defect
2012-09-24 23:33 AugustoMauch Note Added: 0052490
2012-09-24 23:33 AugustoMauch Priority urgent => high
2017-03-31 14:36 alostale Status scheduled => acknowledged
2017-04-10 14:34 alostale Assigned To alostale => platform
2022-02-01 08:08 alostale Assigned To platform => Triage Platform Base


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker