Project:
| View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
| ID | ||||||||
| 0002794 | ||||||||
| Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
| defect | [Openbravo ERP] C. Security | minor | always | 2008-04-02 10:08 | 2009-03-06 12:54 | |||
| Reporter | plujan | View Status | public | |||||
| Assigned To | iperdomo | |||||||
| Priority | normal | Resolution | fixed | Fixed in Version | 2.40alpha-r3 | |||
| Status | closed | Fix in branch | Fixed in SCM revision | |||||
| Projection | none | ETA | none | Target Version | ||||
| OS | Any | Database | Any | Java version | ||||
| OS Version | Database version | Ant version | ||||||
| Product Version | SCM revision | |||||||
| Merge Request Status | ||||||||
| Review Assigned To | ||||||||
| OBNetwork customer | No | |||||||
| Web browser | ||||||||
| Modules | Core | |||||||
| Support ticket | ||||||||
| Regression level | ||||||||
| Regression date | ||||||||
| Regression introduced in release | ||||||||
| Regression introduced by commit | ||||||||
| Triggers an Emergency Pack | No | |||||||
| Summary | 0002794: QA-CCV2 Retrieving business partner of other clients | |||||||
| Description | Description: Using "getCustomer - Request - Get by Id" it is possible to retrieve a customer that belongs to a different client. Environment: OS: Windows XP SP2 DB: Oracle XE Release: OB CCV2 branch (28-03-2008) Web browser: Mozilla Firefox 2 Steps: 1. Create a new client "NewClient" using Initial Client Setup process 2. Query the database to get all customers 3. Using the "NewClientUser" user, create a XML that queries for a customer that belongs to another client. 4. The resulting XML has data, but it should return null. | |||||||
| Tags | No tags attached. | |||||||
| Attached Files | ||||||||
 Relationships [ Relation Graph ]
[ Dependency Graph ]
|
|
 Relationships |
|
Notes |
|
|
(0003413) plujan (viewer) 2008-04-03 23:37 edited on: 2008-06-12 09:25 |
Logged In: YES user_id=1759992 Originator: YES Update: I can retrieve data also with "getCustomer - GetByNameAndSearchKey" and "getCustomerContact - Request - Get by Id". The "getCustomers - Request - Get all Customers" seems to works fine. I could not test the GetByName and GetBySearchKey but please check it too. Using the UpdateCustomer, UpdateContact and UpdateLocation, I can modify data that belongs to a different client, which is an issue too. |
|
(0006383) user71 2005-06-01 00:00 edited on: 2008-06-12 09:43 |
This bug was originally reported in SourceForge bug tracker and then migrated to Mantis. You can see the original bug report in: https://sourceforge.net/support/tracker.php?aid=1931995 [^] |
|
Notes |
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2008-06-19 16:37 | psarobe | Fixed in Version | 2.40alpha-r2 => 2.40alpha-r3 |
| 2009-03-06 12:54 | psarobe | Status | resolved => closed |
|
Issue History |
| Copyright © 2000 - 2009 MantisBT Group |
 |