Project:
| View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
| ID | ||||||||
| 0020625 | ||||||||
| Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
| defect | [Openbravo ERP] C. Security | critical | always | 2012-05-28 16:13 | 2012-05-30 18:13 | |||
| Reporter | adrianromero | View Status | public | |||||
| Assigned To | alostale | |||||||
| Priority | immediate | Resolution | fixed | Fixed in Version | 3.0MP12 | |||
| Status | closed | Fix in branch | Fixed in SCM revision | f94acbb414d4 | ||||
| Projection | none | ETA | none | Target Version | ||||
| OS | Any | Database | Any | Java version | ||||
| OS Version | Database version | Ant version | ||||||
| Product Version | pi | SCM revision | ||||||
| Review Assigned To | ||||||||
| Web browser | ||||||||
| Modules | Core | |||||||
| Regression level | Pre packaging ( pi ) | |||||||
| Regression date | 2012-05-25 | |||||||
| Regression introduced in release | ||||||||
| Regression introduced by commit | https://code.openbravo.com/erp/devel/pi/rev/9f90a57bdd42 [^] | |||||||
| Triggers an Emergency Pack | No | |||||||
| Summary | 0020625: Cannot authenticate using webservices parameters | |||||||
| Description | When executing a webservice passing the login parameters, an HTTP 500 error is returned. | |||||||
| Steps To Reproduce | In an unauthenticated browser just go to: http://localhost:8080/openbravo/ws/dal?l=Openbravo&p=openbravo [^] An HTTP 500 error is returned. The exception thrown is: java.lang.NullPointerException org.openbravo.dal.service.OBDal.checkReadAccess(OBDal.java:546) org.openbravo.dal.service.OBDal.checkReadAccess(OBDal.java:537) org.openbravo.dal.service.OBDal.get(OBDal.java:273) org.openbravo.erpCommon.obps.ActivationKey.refreshIfNeeded(ActivationKey.java:1319) org.openbravo.erpCommon.obps.ActivationKey.getInstance(ActivationKey.java:247) org.openbravo.authentication.AuthenticationManager.webServicePostAuthenticate(AuthenticationManager.java:205) org.openbravo.authentication.AuthenticationManager.webServiceAuthenticate(AuthenticationManager.java:173) org.openbravo.service.web.BaseWebServiceServlet.service(BaseWebServiceServlet.java:69) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) org.openbravo.utils.SessionExpirationFilter.doFilter(SessionExpirationFilter.java:66) org.openbravo.utils.CharsetFilter.doFilter(CharsetFilter.java:35) org.openbravo.client.kernel.KernelFilter$1.doAction(KernelFilter.java:62) org.openbravo.dal.core.ThreadHandler.run(ThreadHandler.java:46) org.openbravo.client.kernel.KernelFilter.doFilter(KernelFilter.java:71) org.openbravo.dal.core.DalRequestFilter$1.doAction(DalRequestFilter.java:81) org.openbravo.dal.core.ThreadHandler.run(ThreadHandler.java:46) org.openbravo.dal.core.DalRequestFilter.doFilter(DalRequestFilter.java:103) It seems that this error has been introduced in the changeset https://code.openbravo.com/erp/devel/pi/rev/9f90a57bdd42 [^] | |||||||
| Tags | No tags attached. | |||||||
| Attached Files | ||||||||
 Relationships [ Relation Graph ]
[ Dependency Graph ]
|
|
 Relationships |
|
Notes |
|
|
(0049376) hgbot (developer) 2012-05-28 16:57 |
Repository: erp/devel/pi Changeset: 661e839cd9ab12919d722ac2492d4b4390679003 Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Mon May 28 16:57:22 2012 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/661e839cd9ab12919d722ac2492d4b4390679003 [^] fixed bug 20625: Reload license as admin --- M src/org/openbravo/erpCommon/obps/ActivationKey.java --- |
|
(0049396) hgbot (developer) 2012-05-29 08:46 |
Repository: erp/devel/pi Changeset: f94acbb414d44a0205c6e7f4fd2978117c49164d Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Tue May 29 08:46:02 2012 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/f94acbb414d44a0205c6e7f4fd2978117c49164d [^] fixed bug 20625: Set admin mode also to check if refresh is needed --- M src/org/openbravo/erpCommon/obps/ActivationKey.java --- |
|
(0049409) AugustoMauch (manager) 2012-05-29 10:10 |
Code reviewed and verified in pi@0e2211ada03d. |
|
(0049496) hudsonbot (developer) 2012-05-30 18:13 |
A changeset related to this issue has been promoted main and to the Central Repository, after passing a series of tests. Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/3752a665362c [^] Maturity status: Test |
|
(0049500) hudsonbot (developer) 2012-05-30 18:13 |
A changeset related to this issue has been promoted main and to the Central Repository, after passing a series of tests. Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/3752a665362c [^] Maturity status: Test |
|
Notes |
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2012-05-28 16:13 | adrianromero | New Issue | |
| 2012-05-28 16:13 | adrianromero | Assigned To | => alostale |
| 2012-05-28 16:13 | adrianromero | Modules | => Core |
| 2012-05-28 16:56 | alostale | Regression level | => Pre packaging ( pi ) |
| 2012-05-28 16:56 | alostale | Regression date | => 2012-05-25 |
| 2012-05-28 16:56 | alostale | Regression introduced by commit | => https://code.openbravo.com/erp/devel/pi/rev/9f90a57bdd42 [^] |
| 2012-05-28 16:57 | hgbot | Checkin | |
| 2012-05-28 16:57 | hgbot | Note Added: 0049376 | |
| 2012-05-28 16:57 | hgbot | Status | new => resolved |
| 2012-05-28 16:57 | hgbot | Resolution | open => fixed |
| 2012-05-28 16:57 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/661e839cd9ab12919d722ac2492d4b4390679003 [^] |
| 2012-05-29 08:46 | hgbot | Checkin | |
| 2012-05-29 08:46 | hgbot | Note Added: 0049396 | |
| 2012-05-29 08:46 | hgbot | Fixed in SCM revision | http://code.openbravo.com/erp/devel/pi/rev/661e839cd9ab12919d722ac2492d4b4390679003 [^] => http://code.openbravo.com/erp/devel/pi/rev/f94acbb414d44a0205c6e7f4fd2978117c49164d [^] |
| 2012-05-29 10:10 | AugustoMauch | Note Added: 0049409 | |
| 2012-05-29 10:10 | AugustoMauch | Status | resolved => closed |
| 2012-05-29 10:10 | AugustoMauch | Fixed in Version | => 3.0MP12 |
| 2012-05-30 18:13 | hudsonbot | Checkin | |
| 2012-05-30 18:13 | hudsonbot | Note Added: 0049496 | |
| 2012-05-30 18:13 | hudsonbot | Checkin | |
| 2012-05-30 18:13 | hudsonbot | Note Added: 0049500 | |
|
Issue History |
| Copyright © 2000 - 2009 MantisBT Group |
 |