Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0023411
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] 08. Project and service managementmajorhave not tried2013-03-26 19:492013-04-01 18:58
ReporterjonalegriaesarteView Statuspublic 
Assigned ToAugustoMauch 
PrioritynormalResolutionfixedFixed in Version3.0MP22
StatusclosedFix in branchFixed in SCM revision1da96e09abea
ProjectionnoneETAnoneTarget Version3.0MP23
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionpiSCM revision 
Review Assigned Toshankarb
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0023411: Employee and invoiceable expenses windows: data is shown to entities without permissions

DescriptionEmployee and invoiceable expenses windows: data is shown to entities without permissions. Logged in in an entity, can see data that belongs to other entity
Steps To Reproduce- Logged in as F&B entity
- Create a new product, expense type, and adding a price
- Create a expense sheet with one line. In the line select the product just created and flag it as reinvoiceable.
- Employee expense window (or invoiceable expense window), the user can see the data.
- Change to QA Testing entity
- Employee expense window (or invoiceable expense window), the user can see the data.
- The user can see the same data.
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]

-  Notes
(0057486)
hgbot (developer)
2013-03-27 13:07

Repository: erp/devel/pi
Changeset: 1da96e09abea9a8e7516cdcc9028f844cb3cb1c2
Author: Augusto Mauch <augusto.mauch <at> openbravo.com>
Date: Wed Mar 27 13:05:59 2013 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/1da96e09abea9a8e7516cdcc9028f844cb3cb1c2 [^]

Fixes issue 23411: Fixed wrong hql where clause

The hql where clause had an extra closing parenthesis. This was making the hql query work improperly, and the client and organization filters were not being applied.

---
M src-db/database/sourcedata/AD_TAB.xml
---
(0057488)
AugustoMauch (manager)
2013-03-27 13:46

changeset: 20018:bc2062961ed8
tag: tip
user: Augusto Mauch <augusto.mauch@openbravo.com>
date: Wed Mar 27 13:42:46 2013 +0100
summary: Related to issue 23411: Removes extra parenthesis from two hql where clauses

https://code.openbravo.com/erp/devel/pi/rev/bc2062961ed8 [^]
(0057529)
shankarb (reporter)
2013-03-28 06:08

Code reviewed @ pi changeset dcf503f0d385
(0057543)
hudsonbot (developer)
2013-04-01 18:58

A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/80299f4b6436 [^]

Maturity status: Test

- Issue History
Date Modified Username Field Change
2013-03-26 19:49 jonalegriaesarte New Issue
2013-03-26 19:49 jonalegriaesarte Assigned To => AugustoMauch
2013-03-26 19:49 jonalegriaesarte Modules => Core
2013-03-26 19:49 jonalegriaesarte Triggers an Emergency Pack => No
2013-03-27 13:03 AugustoMauch Issue Monitored: shankarb
2013-03-27 13:04 AugustoMauch Review Assigned To => shankarb
2013-03-27 13:07 hgbot Checkin
2013-03-27 13:07 hgbot Note Added: 0057486
2013-03-27 13:07 hgbot Status new => resolved
2013-03-27 13:07 hgbot Resolution open => fixed
2013-03-27 13:07 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/1da96e09abea9a8e7516cdcc9028f844cb3cb1c2 [^]
2013-03-27 13:46 AugustoMauch Note Added: 0057488
2013-03-28 06:08 shankarb Note Added: 0057529
2013-03-28 06:08 shankarb Status resolved => closed
2013-03-28 06:08 shankarb Fixed in Version => 3.0MP22
2013-04-01 18:58 hudsonbot Checkin
2013-04-01 18:58 hudsonbot Note Added: 0057543


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker