Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0029683
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] A. Platformmajoralways2015-04-23 16:442015-12-11 08:39
ReporterrbianchiniView Statuspublic 
Assigned Tocaristu 
PriorityhighResolutionfixedFixed in Version3.0PR16Q1
StatusclosedFix in branchFixed in SCM revision2c0caa49fcc0
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionpiSCM revision 
Merge Request Status
Review Assigned Toalostale
OBNetwork customerNo
Web browserGoogle Chrome
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0029683: web services do not filter by organization in System/Clients Entities

Descriptionweb services do not filter by organization in System/Clients Entities
Steps To Reproduce1- Login with role QA testing
2- Go to Window "Country and Regions"
3- Add a new Region for Spain (e.g: Test)
4- Connect to : https://livebuilds.openbravo.com/erp_pi_pgsql/ws/dal/Country/106 [^]
5- Notice that the result is showing data for both F&B and QA Clients, but the default role is from F&B
TagsNo tags attached.
Attached Filespng file icon Bug.png [^] (320,903 bytes) 2015-04-23 16:44

- Relationships [ Relation Graph ] [ Dependency Graph ]
causes defect 0032584 closedinigosanchez Header tab data disappear 
causes defect 0035397 closedcaristu Not possible to get on the webservice regions of a country when those are defined to client 0. 

-  Notes
(0081933)
hgbot (developer)
2015-11-17 17:59

 Repository: erp/devel/pi
Changeset: 2c0caa49fcc0792e77c29ad705fe662b1eaf12d3
Author: Carlos Aristu <carlos.aristu <at> openbravo.com>
Date: Tue Nov 17 17:57:32 2015 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/2c0caa49fcc0792e77c29ad705fe662b1eaf12d3 [^]

fixes issue 29683: web services not filter system/client entity by client

The problem here was that system/client entities can have children properties which belongs to different clients. So it was necessary to filter the children properties by the current client also, when returning the web service results.

---
M src/org/openbravo/dal/xml/EntityXMLConverter.java
M src/org/openbravo/service/rest/DalWebService.java
---
(0082249)
hudsonbot (viewer)
2015-11-23 21:17

 A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/7b56bebaaa88 [^]
Maturity status: Test
(0082413)
hgbot (developer)
2015-11-27 10:50

 Repository: erp/devel/pi
Changeset: 90a660b52e0712467ae41e4e962cae35df8997ae
Author: Carlos Aristu <carlos.aristu <at> openbravo.com>
Date: Fri Nov 27 10:48:02 2015 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/90a660b52e0712467ae41e4e962cae35df8997ae [^]

related to issue 29683: check client/org in web services when requesting by id

---
M modules/org.openbravo.service.json/src/org/openbravo/service/json/DefaultJsonDataService.java
M src/org/openbravo/service/rest/DalWebService.java
---
(0082448)
hudsonbot (viewer)
2015-11-28 15:24

 A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/a30fd74371da [^]
Maturity status: Test
(0082459)
alostale (viewer)
2015-11-30 09:53
edited on: 2015-11-30 09:53

 reopening because of code review for changeset 90a660b52e07:

Don't create query by concatenating strings, it can be used for HQL injection. Use parameterized query instead.
(0082481)
hgbot (developer)
2015-12-01 11:35

 Repository: erp/devel/pi
Changeset: 1ff6e13ac85672bd37e76a86390cdd449c418c0e
Author: Carlos Aristu <carlos.aristu <at> openbravo.com>
Date: Tue Dec 01 11:34:45 2015 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/1ff6e13ac85672bd37e76a86390cdd449c418c0e [^]

related to issue 29683: use parameterized query when requesting by id

---
M modules/org.openbravo.service.json/src/org/openbravo/service/json/DefaultJsonDataService.java
M src/org/openbravo/service/rest/DalWebService.java
---
(0082510)
hudsonbot (viewer)
2015-12-02 00:10

 A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/a52bb700bbaf [^]
Maturity status: Test
(0082669)
alostale (viewer)
2015-12-11 08:39

 code reviewed + tested

- Issue History
Date Modified Username Field Change
2015-04-23 16:44 rbianchini New Issue
2015-04-23 16:44 rbianchini Assigned To => platform
2015-04-23 16:44 rbianchini File Added: Bug.png
2015-04-23 16:44 rbianchini OBNetwork customer => No
2015-04-23 16:44 rbianchini Web browser => Google Chrome
2015-04-23 16:44 rbianchini Modules => Core
2015-04-23 16:44 rbianchini Triggers an Emergency Pack => No
2015-04-24 08:26 alostale Web browser Google Chrome => Google Chrome
2015-04-24 08:26 alostale Priority normal => urgent
2015-04-24 08:26 alostale Status new => acknowledged
2015-11-11 11:34 alostale Priority urgent => high
2015-11-17 11:18 caristu Assigned To platform => caristu
2015-11-17 11:18 caristu Status acknowledged => scheduled
2015-11-17 17:57 caristu Review Assigned To => alostale
2015-11-17 17:57 caristu Web browser Google Chrome => Google Chrome
2015-11-17 17:58 caristu Issue Monitored: alostale
2015-11-17 17:59 hgbot Checkin
2015-11-17 17:59 hgbot Note Added: 0081933
2015-11-17 17:59 hgbot Status scheduled => resolved
2015-11-17 17:59 hgbot Resolution open => fixed
2015-11-17 17:59 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/2c0caa49fcc0792e77c29ad705fe662b1eaf12d3 [^]
2015-11-23 21:17 hudsonbot Checkin
2015-11-23 21:17 hudsonbot Note Added: 0082249
2015-11-27 10:50 hgbot Checkin
2015-11-27 10:50 hgbot Note Added: 0082413
2015-11-28 15:24 hudsonbot Checkin
2015-11-28 15:24 hudsonbot Note Added: 0082448
2015-11-30 09:53 alostale Note Added: 0082459
2015-11-30 09:53 alostale Status resolved => new
2015-11-30 09:53 alostale Resolution fixed => open
2015-11-30 09:53 alostale Note Edited: 0082459 View Revisions
2015-12-01 11:35 hgbot Checkin
2015-12-01 11:35 hgbot Note Added: 0082481
2015-12-01 11:35 caristu Status new => scheduled
2015-12-01 11:36 caristu Status scheduled => resolved
2015-12-01 11:36 caristu Resolution open => fixed
2015-12-02 00:10 hudsonbot Checkin
2015-12-02 00:10 hudsonbot Note Added: 0082510
2015-12-11 08:39 alostale Note Added: 0082669
2015-12-11 08:39 alostale Status resolved => closed
2015-12-11 08:39 alostale Fixed in Version => 3.0PR16Q1
2016-04-05 13:07 inigosanchez Relationship added causes 0032584
2017-03-01 18:02 caristu Relationship added causes 0035397

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker