Project:
View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
ID | ||||||||
0002852 | ||||||||
Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
defect | [Openbravo ERP] C. Security | minor | always | 2008-04-11 19:11 | 2008-07-02 17:33 | |||
Reporter | Dowid | View Status | public | |||||
Assigned To | alostale | |||||||
Priority | normal | Resolution | fixed | Fixed in Version | 2.40beta | |||
Status | closed | Fix in branch | Fixed in SCM revision | |||||
Projection | none | ETA | none | Target Version | ||||
OS | Any | Database | Any | Java version | ||||
OS Version | Database version | Ant version | ||||||
Product Version | SCM revision | |||||||
Merge Request Status | ||||||||
Review Assigned To | ||||||||
OBNetwork customer | No | |||||||
Web browser | ||||||||
Modules | Core | |||||||
Support ticket | ||||||||
Regression level | ||||||||
Regression date | ||||||||
Regression introduced in release | ||||||||
Regression introduced by commit | ||||||||
Triggers an Emergency Pack | No | |||||||
Summary | 0002852: Clear Session button doesn't work correct. | |||||||
Description | Clear Session button doesn't work correct. Go to General Setup->Session Information Click "Clear session" button After pressing "Clear Session" button you are redirected to the Login page. This button works correctly in version 2.22 and doesn't work correctly in version 2.35. I belive the reason of this bug is that VariablesBase.clearSession method doesn't save the #Authenticated_user session atribute. Possible solution: Change clearSession method in the VariablesBase java class to: public void clearSession(boolean all) { if (log4j.isDebugEnabled()) log4j.debug("...: removing session"); String target=""; String authenticated_user=""; try { String sessionName; Enumeration<?> e = session.getAttributeNames(); while (e.hasMoreElements()) { sessionName = (String)e.nextElement(); if (log4j.isDebugEnabled()) log4j.debug(" session name: " + sessionName); if (!all && sessionName.equalsIgnoreCase("target")) target = (String) session.getAttribute(sessionName); if (!all && sessionName.equalsIgnoreCase("#Authenticated_user")) authenticated_user = (String) session.getAttribute(sessionName); session.removeAttribute(sessionName); e = session.getAttributeNames(); } } catch (Exception e) { log4j.error("clearSession error " + e); } if (!target.equals("")) session.setAttribute("TARGET", target); if (!authenticated_user.equals("")) session.setAttribute("#Authenticated_user", authenticated_user); } | |||||||
Tags | No tags attached. | |||||||
Attached Files | ||||||||
![]() |
|
![]() |
|
(0003521) cromero (viewer) 2008-04-14 10:55 edited on: 2008-06-12 09:25 |
Logged In: YES user_id=1500614 Originator: NO This bug is duplicated with this other one: https://sourceforge.net/tracker/index.php?func=detail&aid=1824278&group_id=162271&atid=823129 [^] |
(0003522) alostale (viewer) 2008-05-12 09:56 edited on: 2008-06-12 09:25 |
Logged In: YES user_id=1500722 Originator: NO This button (and its code) has been removed because it is not longer used. |
(0006441) user71 2005-06-01 00:00 edited on: 2008-06-12 09:43 |
This bug was originally reported in SourceForge bug tracker and then migrated to Mantis. You can see the original bug report in: https://sourceforge.net/support/tracker.php?aid=1940352 [^] |
![]() |
|||
Date Modified | Username | Field | Change |
2008-07-02 17:33 | plujan | Status | resolved => closed |
2008-07-02 17:33 | plujan | Fixed in Version | 2.40alpha-r2 => 2.40beta |
Copyright © 2000 - 2009 MantisBT Group |