Project:
| View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
| ID | ||||||||
| 0002398 | ||||||||
| Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
| defect | [Openbravo ERP] C. Security | minor | always | 2007-12-20 14:42 | 2008-07-08 18:43 | |||
| Reporter | roklenardic | View Status | public | |||||
| Assigned To | alostale | |||||||
| Priority | normal | Resolution | fixed | Fixed in Version | 2.40beta | |||
| Status | closed | Fix in branch | Fixed in SCM revision | |||||
| Projection | none | ETA | none | Target Version | ||||
| OS | Any | Database | Any | Java version | ||||
| OS Version | Database version | Ant version | ||||||
| Product Version | SCM revision | |||||||
| Merge Request Status | ||||||||
| Review Assigned To | ||||||||
| OBNetwork customer | No | |||||||
| Web browser | ||||||||
| Modules | Core | |||||||
| Support ticket | ||||||||
| Regression level | ||||||||
| Regression date | ||||||||
| Regression introduced in release | ||||||||
| Regression introduced by commit | ||||||||
| Triggers an Emergency Pack | No | |||||||
| Summary | 0002398: Delete key in Relation view | |||||||
| Description | When in relation mode/view of a window/tab that has read-only privileges, one can still press the delete key and delete a record even though the button in the toolbar for deleting it does not exist (clearly since it is a read only window). This seems to be a major security/privileges issues since people that do not have delete privileges can delete record in relation view or windows/tabs that are defined as read only still allow deletion. Ubuntu Oracle XE tomcat 5.5 firefox 2 | |||||||
| Tags | No tags attached. | |||||||
| Attached Files | ||||||||
 Relationships [ Relation Graph ]
[ Dependency Graph ]
|
||||||||
|
||||||||
 Relationships |
|
Notes |
|
|
(0005987) user71 2005-06-01 00:00 edited on: 2008-06-12 09:43 |
This bug was originally reported in SourceForge bug tracker and then migrated to Mantis. You can see the original bug report in: https://sourceforge.net/support/tracker.php?aid=1854877 [^] |
|
Notes |
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2008-07-08 18:43 | plujan | Status | resolved => closed |
| 2008-07-08 18:43 | plujan | Fixed in Version | 2.40alpha-r2 => 2.40beta |
|
Issue History |
| Copyright © 2000 - 2009 MantisBT Group |
 |