Project:
| View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
| ID | ||||||||
| 0023520 | ||||||||
| Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
| design defect | [Openbravo ERP] C. Security | minor | always | 2013-04-09 17:49 | 2013-04-30 12:08 | |||
| Reporter | alostale | View Status | public | |||||
| Assigned To | alostale | |||||||
| Priority | normal | Resolution | fixed | Fixed in Version | 3.0MP23 | |||
| Status | closed | Fix in branch | Fixed in SCM revision | 08d5a13b722b | ||||
| Projection | none | ETA | none | Target Version | 3.0MP23 | |||
| OS | Any | Database | Any | Java version | ||||
| OS Version | Database version | Ant version | ||||||
| Product Version | SCM revision | |||||||
| Merge Request Status | ||||||||
| Review Assigned To | AugustoMauch | |||||||
| OBNetwork customer | No | |||||||
| Web browser | ||||||||
| Modules | Core | |||||||
| Support ticket | ||||||||
| Regression level | ||||||||
| Regression date | ||||||||
| Regression introduced in release | ||||||||
| Regression introduced by commit | ||||||||
| Triggers an Emergency Pack | No | |||||||
| Summary | 0023520: Restrict access to query list widgets | |||||||
| Description | Datasources of Query List widgets shouldn't be accessible by URL in case the widget is not included in the ones that are shown in the current's session workspace. | |||||||
| Steps To Reproduce | - | |||||||
| Tags | No tags attached. | |||||||
| Attached Files | ||||||||
 Relationships [ Relation Graph ]
[ Dependency Graph ]
|
||||||||
|
||||||||
 Relationships |
|
Notes |
|
|
(0057899) hgbot (developer) 2013-04-15 13:49 |
Repository: erp/devel/pi Changeset: 08d5a13b722bbc496c640a976d5bb319a1db44bc Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Wed Apr 10 10:01:55 2013 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/08d5a13b722bbc496c640a976d5bb319a1db44bc [^] fixed issue 23520: Restrict access to query list widgets --- M modules/org.openbravo.client.querylist/src-db/database/sourcedata/AD_MESSAGE.xml M modules/org.openbravo.client.querylist/src/org/openbravo/client/querylist/QueryListDataSource.java --- |
|
(0057976) hudsonbot (viewer) 2013-04-16 19:18 |
A changeset related to this issue has been promoted main and to the Central Repository, after passing a series of tests. Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/8df08bea850d [^] Maturity status: Test |
|
(0058342) AugustoMauch (administrator) 2013-04-30 12:08 |
Code reviewed and verified in pi@a7efc1231554 |
|
Notes |
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2013-04-09 17:49 | alostale | New Issue | |
| 2013-04-09 17:49 | alostale | Assigned To | => alostale |
| 2013-04-09 17:49 | alostale | Modules | => Core |
| 2013-04-09 17:49 | alostale | OBNetwork customer | => No |
| 2013-04-09 17:49 | alostale | Triggers an Emergency Pack | => No |
| 2013-04-09 17:50 | alostale | Relationship added | related to 0023518 |
| 2013-04-15 13:49 | hgbot | Checkin | |
| 2013-04-15 13:49 | hgbot | Note Added: 0057899 | |
| 2013-04-15 13:49 | hgbot | Status | new => resolved |
| 2013-04-15 13:49 | hgbot | Resolution | open => fixed |
| 2013-04-15 13:49 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/08d5a13b722bbc496c640a976d5bb319a1db44bc [^] |
| 2013-04-15 14:43 | alostale | Review Assigned To | => AugustoMauch |
| 2013-04-16 19:18 | hudsonbot | Checkin | |
| 2013-04-16 19:18 | hudsonbot | Note Added: 0057976 | |
| 2013-04-30 12:08 | AugustoMauch | Note Added: 0058342 | |
| 2013-04-30 12:08 | AugustoMauch | Status | resolved => closed |
| 2013-04-30 12:08 | AugustoMauch | Fixed in Version | => 3.0MP23 |
|
Issue History |
| Copyright © 2000 - 2009 MantisBT Group |
 |