Project:
View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
ID | ||||||||
0020625 | ||||||||
Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
defect | [Openbravo ERP] C. Security | critical | always | 2012-05-28 16:13 | 2012-05-30 18:13 | |||
Reporter | adrianromero | View Status | public | |||||
Assigned To | alostale | |||||||
Priority | immediate | Resolution | fixed | Fixed in Version | 3.0MP12 | |||
Status | closed | Fix in branch | Fixed in SCM revision | f94acbb414d4 | ||||
Projection | none | ETA | none | Target Version | ||||
OS | Any | Database | Any | Java version | ||||
OS Version | Database version | Ant version | ||||||
Product Version | pi | SCM revision | ||||||
Merge Request Status | ||||||||
Review Assigned To | ||||||||
OBNetwork customer | No | |||||||
Web browser | ||||||||
Modules | Core | |||||||
Support ticket | ||||||||
Regression level | Pre packaging ( pi ) | |||||||
Regression date | 2012-05-25 | |||||||
Regression introduced in release | ||||||||
Regression introduced by commit | https://code.openbravo.com/erp/devel/pi/rev/9f90a57bdd42 [^] | |||||||
Triggers an Emergency Pack | No | |||||||
Summary | 0020625: Cannot authenticate using webservices parameters | |||||||
Description | When executing a webservice passing the login parameters, an HTTP 500 error is returned. | |||||||
Steps To Reproduce | In an unauthenticated browser just go to: http://localhost:8080/openbravo/ws/dal?l=Openbravo&p=openbravo [^] An HTTP 500 error is returned. The exception thrown is: java.lang.NullPointerException org.openbravo.dal.service.OBDal.checkReadAccess(OBDal.java:546) org.openbravo.dal.service.OBDal.checkReadAccess(OBDal.java:537) org.openbravo.dal.service.OBDal.get(OBDal.java:273) org.openbravo.erpCommon.obps.ActivationKey.refreshIfNeeded(ActivationKey.java:1319) org.openbravo.erpCommon.obps.ActivationKey.getInstance(ActivationKey.java:247) org.openbravo.authentication.AuthenticationManager.webServicePostAuthenticate(AuthenticationManager.java:205) org.openbravo.authentication.AuthenticationManager.webServiceAuthenticate(AuthenticationManager.java:173) org.openbravo.service.web.BaseWebServiceServlet.service(BaseWebServiceServlet.java:69) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) org.openbravo.utils.SessionExpirationFilter.doFilter(SessionExpirationFilter.java:66) org.openbravo.utils.CharsetFilter.doFilter(CharsetFilter.java:35) org.openbravo.client.kernel.KernelFilter$1.doAction(KernelFilter.java:62) org.openbravo.dal.core.ThreadHandler.run(ThreadHandler.java:46) org.openbravo.client.kernel.KernelFilter.doFilter(KernelFilter.java:71) org.openbravo.dal.core.DalRequestFilter$1.doAction(DalRequestFilter.java:81) org.openbravo.dal.core.ThreadHandler.run(ThreadHandler.java:46) org.openbravo.dal.core.DalRequestFilter.doFilter(DalRequestFilter.java:103) It seems that this error has been introduced in the changeset https://code.openbravo.com/erp/devel/pi/rev/9f90a57bdd42 [^] | |||||||
Tags | No tags attached. | |||||||
Attached Files | ||||||||
![]() |
|
![]() |
|
(0049376) hgbot (developer) 2012-05-28 16:57 |
Repository: erp/devel/pi Changeset: 661e839cd9ab12919d722ac2492d4b4390679003 Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Mon May 28 16:57:22 2012 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/661e839cd9ab12919d722ac2492d4b4390679003 [^] fixed bug 20625: Reload license as admin --- M src/org/openbravo/erpCommon/obps/ActivationKey.java --- |
(0049396) hgbot (developer) 2012-05-29 08:46 |
Repository: erp/devel/pi Changeset: f94acbb414d44a0205c6e7f4fd2978117c49164d Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Tue May 29 08:46:02 2012 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/f94acbb414d44a0205c6e7f4fd2978117c49164d [^] fixed bug 20625: Set admin mode also to check if refresh is needed --- M src/org/openbravo/erpCommon/obps/ActivationKey.java --- |
(0049409) AugustoMauch (administrator) 2012-05-29 10:10 |
Code reviewed and verified in pi@0e2211ada03d. |
(0049496) hudsonbot (viewer) 2012-05-30 18:13 |
A changeset related to this issue has been promoted main and to the Central Repository, after passing a series of tests. Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/3752a665362c [^] Maturity status: Test |
(0049500) hudsonbot (viewer) 2012-05-30 18:13 |
A changeset related to this issue has been promoted main and to the Central Repository, after passing a series of tests. Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/3752a665362c [^] Maturity status: Test |
![]() |
|||
Date Modified | Username | Field | Change |
2012-05-28 16:13 | adrianromero | New Issue | |
2012-05-28 16:13 | adrianromero | Assigned To | => alostale |
2012-05-28 16:13 | adrianromero | Modules | => Core |
2012-05-28 16:13 | adrianromero | OBNetwork customer | => No |
2012-05-28 16:56 | alostale | Regression level | => Pre packaging ( pi ) |
2012-05-28 16:56 | alostale | Regression date | => 2012-05-25 |
2012-05-28 16:56 | alostale | Regression introduced by commit | => https://code.openbravo.com/erp/devel/pi/rev/9f90a57bdd42 [^] |
2012-05-28 16:57 | hgbot | Checkin | |
2012-05-28 16:57 | hgbot | Note Added: 0049376 | |
2012-05-28 16:57 | hgbot | Status | new => resolved |
2012-05-28 16:57 | hgbot | Resolution | open => fixed |
2012-05-28 16:57 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/661e839cd9ab12919d722ac2492d4b4390679003 [^] |
2012-05-29 08:46 | hgbot | Checkin | |
2012-05-29 08:46 | hgbot | Note Added: 0049396 | |
2012-05-29 08:46 | hgbot | Fixed in SCM revision | http://code.openbravo.com/erp/devel/pi/rev/661e839cd9ab12919d722ac2492d4b4390679003 [^] => http://code.openbravo.com/erp/devel/pi/rev/f94acbb414d44a0205c6e7f4fd2978117c49164d [^] |
2012-05-29 10:10 | AugustoMauch | Note Added: 0049409 | |
2012-05-29 10:10 | AugustoMauch | Status | resolved => closed |
2012-05-29 10:10 | AugustoMauch | Fixed in Version | => 3.0MP12 |
2012-05-30 18:13 | hudsonbot | Checkin | |
2012-05-30 18:13 | hudsonbot | Note Added: 0049496 | |
2012-05-30 18:13 | hudsonbot | Checkin | |
2012-05-30 18:13 | hudsonbot | Note Added: 0049500 |
Copyright © 2000 - 2009 MantisBT Group |