Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0019672
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] 01. General setupminoralways2012-02-07 09:022012-03-13 08:37
ReporterxabiermerinoView Statuspublic 
Assigned Toalostale 
PriorityhighResolutionno change requiredFixed in Version
StatusclosedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version2.50MP41
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product Version2.50MP38SCM revision 
Review Assigned To
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0019672: Inconsistent data when you change the organization of a register

DescriptionWe have an user defiend to organization B with role B. We create a BP with this user. We are able to change the org to A using Openbravo Admin. This is wrong because the createdby is an user defined in the organization B and the BP is defined in the organization A. These organizations are in the same level.

In OB3 this behaviour is not allowed.
Steps To Reproduce-Create new a user:
  * Organization: B
  * user name: b
  * pass: b
- Go to User Roles: select Rol B
- Go to General Setup || Security || Role and select the rol
- Go to Org Access:
    - Eliminate the access to A's organizations and Main's one.
- Login with B user (b/b)
- Create a BP (organization B)
- Login with Openbravo Admin
- Go to the BP created by B change the organization to A
- save it
- In this moment this BP have a column (updatedby) with an user of the B organization. This scenario is not allowed in Openbravo 3. You are not able to save this record because the A organization is in the same level than B organization.
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]

-  Notes
(0046093)
alostale (manager)
2012-03-06 16:07

The description and steps to reproduce of this issue are not clear enough. Please provide clearer information.

Thanks.
(0046302)
alostale (manager)
2012-03-13 08:37

Described behavior is correct, created by and updated by shouldn't be used to enforce security.

- Issue History
Date Modified Username Field Change
2012-02-07 09:02 xabiermerino New Issue
2012-02-07 09:02 xabiermerino Assigned To => jonalegriaesarte
2012-02-07 09:02 xabiermerino Modules => Core
2012-02-07 09:02 xabiermerino Resolution time => 1335132000
2012-02-07 09:06 xabiermerino Issue Monitored: networkb
2012-03-06 12:51 jonalegriaesarte Assigned To jonalegriaesarte => alostale
2012-03-06 16:07 alostale Note Added: 0046093
2012-03-06 16:07 alostale Status new => feedback
2012-03-06 16:27 xabiermerino Status feedback => new
2012-03-06 16:27 xabiermerino Description Updated View Revisions
2012-03-06 16:27 xabiermerino Steps to Reproduce Updated View Revisions
2012-03-07 12:38 xabiermerino Target Version 2.50MP40 => 2.50MP41
2012-03-13 08:37 alostale Note Added: 0046302
2012-03-13 08:37 alostale Status new => closed
2012-03-13 08:37 alostale Resolution open => no change required


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker