Project:
| View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
| ID | ||||||||
| 0021648 | ||||||||
| Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
| defect | [Openbravo ERP] A. Platform | major | always | 2012-09-13 20:46 | 2012-09-26 17:19 | |||
| Reporter | dmitry_mezentsev | View Status | public | |||||
| Assigned To | AugustoMauch | |||||||
| Priority | high | Resolution | fixed | Fixed in Version | 3.0MP16 | |||
| Status | closed | Fix in branch | Fixed in SCM revision | 3fec9dfdd735 | ||||
| Projection | none | ETA | none | Target Version | ||||
| OS | Any | Database | Any | Java version | ||||
| OS Version | Database version | Ant version | ||||||
| Product Version | pi | SCM revision | ||||||
| Review Assigned To | AugustoMauch | |||||||
| Web browser | ||||||||
| Modules | Core | |||||||
| Regression level | ||||||||
| Regression date | ||||||||
| Regression introduced in release | ||||||||
| Regression introduced by commit | ||||||||
| Triggers an Emergency Pack | No | |||||||
| Summary | 0021648: User that has a readonly access to the record can delete its attachment or add new | |||||||
| Description | User that has a readonly access to the record can delete its attachment User can also add attachments to the read-only record. IMHO should not be the case. | |||||||
| Steps To Reproduce | live.buils.pi as of 13.09.2012 1. Login with Openbravo / openbravo. 2. Switch the role to System Admin. 3. Launch Currency window and add attachment to any record. 4. Change the role to F&B Int. Group Admin or log in with a user that does not have System Admin role. 5. Go to the Currency window. It is read-only. 6. Check attachments section. Attachment can be deleted. 7. And user can also add new attachments. | |||||||
| Tags | No tags attached. | |||||||
| Attached Files | ||||||||
 Relationships [ Relation Graph ]
[ Dependency Graph ]
|
|
 Relationships |
|
Notes |
|
|
(0052146) hgbot (developer) 2012-09-14 17:02 |
Repository: erp/devel/pi Changeset: 3fec9dfdd73575e50184f738e47fc3057e545ecf Author: Shankar Balachandran <shankar.balachandran <at> openbravo.com> Date: Fri Sep 14 16:51:05 2012 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/3fec9dfdd73575e50184f738e47fc3057e545ecf [^] Fixes Issue 21648 : Adding Read-Only Logic to Attachments When User has read-only access, they can download attachments, but they cannot add/remove attachments. --- M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/form/ob-view-form-attachments.js M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/toolbar/ob-toolbar.js --- |
|
(0052764) hudsonbot (developer) 2012-09-26 17:19 |
A changeset related to this issue has been promoted main and to the Central Repository, after passing a series of tests. Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/b780e90c6452 [^] Maturity status: Test |
|
Notes |
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2012-09-13 20:46 | dmitry_mezentsev | New Issue | |
| 2012-09-13 20:46 | dmitry_mezentsev | Assigned To | => AugustoMauch |
| 2012-09-13 20:46 | dmitry_mezentsev | Modules | => Core |
| 2012-09-13 20:55 | dmitry_mezentsev | Priority | low => high |
| 2012-09-13 20:55 | dmitry_mezentsev | Severity | minor => major |
| 2012-09-14 17:02 | hgbot | Checkin | |
| 2012-09-14 17:02 | hgbot | Note Added: 0052146 | |
| 2012-09-14 17:02 | hgbot | Status | new => resolved |
| 2012-09-14 17:02 | hgbot | Resolution | open => fixed |
| 2012-09-14 17:02 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/3fec9dfdd73575e50184f738e47fc3057e545ecf [^] |
| 2012-09-14 17:03 | AugustoMauch | Closed by | => AugustoMauch |
| 2012-09-14 17:03 | AugustoMauch | Status | resolved => closed |
| 2012-09-14 17:03 | AugustoMauch | Fixed in Version | => 3.0MP16 |
| 2012-09-26 17:19 | hudsonbot | Checkin | |
| 2012-09-26 17:19 | hudsonbot | Note Added: 0052764 | |
|
Issue History |
| Copyright © 2000 - 2009 MantisBT Group |
 |