Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0021648
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] A. Platformmajoralways2012-09-13 20:462012-09-26 17:19
Reporterdmitry_mezentsevView Statuspublic 
Assigned ToAugustoMauch 
PriorityhighResolutionfixedFixed in Version3.0MP16
StatusclosedFix in branchFixed in SCM revision3fec9dfdd735
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionpiSCM revision 
Merge Request Status
Review Assigned ToAugustoMauch
OBNetwork customerNo
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0021648: User that has a readonly access to the record can delete its attachment or add new

DescriptionUser that has a readonly access to the record can delete its attachment

User can also add attachments to the read-only record. IMHO should not be the case.
Steps To Reproducelive.buils.pi as of 13.09.2012

1. Login with Openbravo / openbravo.
2. Switch the role to System Admin.
3. Launch Currency window and add attachment to any record.
4. Change the role to F&B Int. Group Admin or log in with a user that does not have System Admin role.
5. Go to the Currency window. It is read-only.
6. Check attachments section. Attachment can be deleted.
7. And user can also add new attachments.
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]

-  Notes
(0052146)
hgbot (developer)
2012-09-14 17:02

 Repository: erp/devel/pi
Changeset: 3fec9dfdd73575e50184f738e47fc3057e545ecf
Author: Shankar Balachandran <shankar.balachandran <at> openbravo.com>
Date: Fri Sep 14 16:51:05 2012 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/3fec9dfdd73575e50184f738e47fc3057e545ecf [^]

Fixes Issue 21648 : Adding Read-Only Logic to Attachments

When User has read-only access, they can download attachments, but they cannot add/remove attachments.

---
M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/form/ob-view-form-attachments.js
M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/toolbar/ob-toolbar.js
---
(0052764)
hudsonbot (viewer)
2012-09-26 17:19

 A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/b780e90c6452 [^]

Maturity status: Test

- Issue History
Date Modified Username Field Change
2012-09-13 20:46 dmitry_mezentsev New Issue
2012-09-13 20:46 dmitry_mezentsev Assigned To => AugustoMauch
2012-09-13 20:46 dmitry_mezentsev Modules => Core
2012-09-13 20:46 dmitry_mezentsev OBNetwork customer => No
2012-09-13 20:55 dmitry_mezentsev Priority low => high
2012-09-13 20:55 dmitry_mezentsev Severity minor => major
2012-09-14 17:02 hgbot Checkin
2012-09-14 17:02 hgbot Note Added: 0052146
2012-09-14 17:02 hgbot Status new => resolved
2012-09-14 17:02 hgbot Resolution open => fixed
2012-09-14 17:02 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/3fec9dfdd73575e50184f738e47fc3057e545ecf [^]
2012-09-14 17:03 AugustoMauch Closed by => AugustoMauch
2012-09-14 17:03 AugustoMauch Status resolved => closed
2012-09-14 17:03 AugustoMauch Fixed in Version => 3.0MP16
2012-09-26 17:19 hudsonbot Checkin
2012-09-26 17:19 hudsonbot Note Added: 0052764

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker