Project:
| View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
| ID | ||||||||
| 0027057 | ||||||||
| Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
| defect | [Openbravo ERP] C. Security | critical | have not tried | 2014-07-14 08:56 | 2014-08-08 18:53 | |||
| Reporter | alostale | View Status | public | |||||
| Assigned To | alostale | |||||||
| Priority | immediate | Resolution | fixed | Fixed in Version | 3.0PR14Q3 | |||
| Status | closed | Fix in branch | Fixed in SCM revision | 25364ea4dcdc | ||||
| Projection | none | ETA | none | Target Version | ||||
| OS | Any | Database | Any | Java version | ||||
| OS Version | Database version | Ant version | ||||||
| Product Version | SCM revision | |||||||
| Review Assigned To | shankarb | |||||||
| Web browser | ||||||||
| Modules | Core | |||||||
| Regression level | Pre packaging ( pi ) | |||||||
| Regression date | 2014-05-26 | |||||||
| Regression introduced in release | main | |||||||
| Regression introduced by commit | http://code.openbravo.com/erp/devel/pi/rev/402d7bca3f774737bf194cb7cbe41d2454a69326 [^] | |||||||
| Triggers an Emergency Pack | No | |||||||
| Summary | 0027057: can't select value in drop down if role has no access to field entity | |||||||
| Description | Drop down list selectors (table and table dir references) don't show any data if the current role has not, at least derived, access to field entity. | |||||||
| Steps To Reproduce | -Set Employee role -Create new record in Requisition window -Open Price List Drop down * "No Items To show" message is shown * Error in log can be seen: ERROR org.openbravo.base.exception.OBException - Entity ADField is not readable by the user 100 Same in MP31 is displaying list of values | |||||||
| Tags | No tags attached. | |||||||
| Attached Files | ||||||||
 Relationships [ Relation Graph ]
[ Dependency Graph ]
|
||||||||
|
||||||||
 Relationships |
|
Notes |
|
|
(0068596) hgbot (developer) 2014-07-14 09:18 |
Repository: erp/devel/pi Changeset: 25364ea4dcdc958837d8e93e32ea7ed52f0e88b6 Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Mon Jul 14 09:17:23 2014 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/25364ea4dcdc958837d8e93e32ea7ed52f0e88b6 [^] fixed bug 27057: can't select value in drop down if role has no access to field entity Entity access check is done in admin mode, other case it failed if current role had no access to field/column entities --- M modules/org.openbravo.service.datasource/src/org/openbravo/service/datasource/ComboTableDatasourceService.java --- |
|
(0068597) hgbot (developer) 2014-07-14 09:18 |
Repository: erp/devel/pi Changeset: 022f33b5b771a2a39eb2cb05f2a3af52a3a15c8a Author: Asier Lostalé <asier.lostale <at> openbravo.com> Date: Mon Jul 14 09:18:03 2014 +0200 URL: http://code.openbravo.com/erp/devel/pi/rev/022f33b5b771a2a39eb2cb05f2a3af52a3a15c8a [^] related to bug 27057: added test to cover this case --- M src-test/org/openbravo/test/datasource/TestComboDatasource.java --- |
|
(0068601) shankarb (reporter) 2014-07-14 10:15 |
Code reviewed and verified in pi changeset 022f33b5b771. |
|
(0069154) hudsonbot (developer) 2014-08-08 18:53 |
A changeset related to this issue has been promoted main and to the Central Repository, after passing a series of tests. Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/4450016dee64 [^] Maturity status: Test |
|
(0069155) hudsonbot (developer) 2014-08-08 18:53 |
A changeset related to this issue has been promoted main and to the Central Repository, after passing a series of tests. Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/4450016dee64 [^] Maturity status: Test |
|
Notes |
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2014-07-14 08:56 | alostale | New Issue | |
| 2014-07-14 08:56 | alostale | Assigned To | => alostale |
| 2014-07-14 08:56 | alostale | Modules | => Core |
| 2014-07-14 08:56 | alostale | Triggers an Emergency Pack | => No |
| 2014-07-14 08:57 | alostale | Relationship added | related to 0026267 |
| 2014-07-14 08:59 | alostale | Review Assigned To | => shankarb |
| 2014-07-14 08:59 | alostale | Regression level | => Pre packaging ( pi ) |
| 2014-07-14 08:59 | alostale | Regression date | => 2014-05-26 |
| 2014-07-14 08:59 | alostale | Regression introduced in release | => main |
| 2014-07-14 08:59 | alostale | Regression introduced by commit | => http://code.openbravo.com/erp/devel/pi/rev/402d7bca3f774737bf194cb7cbe41d2454a69326 [^] |
| 2014-07-14 09:18 | hgbot | Checkin | |
| 2014-07-14 09:18 | hgbot | Note Added: 0068596 | |
| 2014-07-14 09:18 | hgbot | Status | new => resolved |
| 2014-07-14 09:18 | hgbot | Resolution | open => fixed |
| 2014-07-14 09:18 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/25364ea4dcdc958837d8e93e32ea7ed52f0e88b6 [^] |
| 2014-07-14 09:18 | hgbot | Checkin | |
| 2014-07-14 09:18 | hgbot | Note Added: 0068597 | |
| 2014-07-14 10:15 | shankarb | Note Added: 0068601 | |
| 2014-07-14 10:15 | shankarb | Status | resolved => closed |
| 2014-07-14 10:15 | shankarb | Fixed in Version | => PR14Q3 |
| 2014-08-08 18:53 | hudsonbot | Checkin | |
| 2014-08-08 18:53 | hudsonbot | Note Added: 0069154 | |
| 2014-08-08 18:53 | hudsonbot | Checkin | |
| 2014-08-08 18:53 | hudsonbot | Note Added: 0069155 | |
|
Issue History |
| Copyright © 2000 - 2009 MantisBT Group |
 |