Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0031497
TypeCategorySeverityReproducibilityDate SubmittedLast Update
backport[Retail Modules] Web POSmajoralways2015-09-18 10:032015-12-11 13:37
ReportermalsasuaView Statuspublic 
Assigned Toguilleaer 
PriorityhighResolutionfixedFixed in VersionRR15Q4.1
StatusclosedFix in branchFixed in SCM revision7f73eebbc7ed
ProjectionnoneETAnoneTarget VersionRR15Q4.1
OSLinux 32 bitDatabasePostgreSQLJava version1.6.0_18
OS VersionCommunity ApplianceDatabase version8.3.9Ant version1.7.1
Product VersionRR15Q3SCM revision 
Merge Request Status
Review Assigned Tomarvintm
OBNetwork customerOBPS
Support ticket38178
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0031497: Terminal authentication is allowing to connect from two distinct devices

DescriptionThere is one way to link two devices to the same terminal
Steps To Reproduce. configure to enable terminal authentication
 . in backoffice, as system administrator, change the preference "enable authention" to Y
. in backoffice, in POS Terminal -> VBS-1
    Terminal Key Identifier: 123

. in device1:
  . go to WEBPOS, to terminal VBS-1
  . popup with the next fields are displayed:
   Terminal Key Identifier: 123
   user: vallblanca
   pass: openbravo
  . login is done

. go to backoffice
 . check "is link to device" is checked
 . click button "unlink device"
 . check "is link to device" is unchecked

. in device2:
  . go to WEBPOS, to terminal VBS-1
  . popup with the next fields are displayed:
   Terminal Key Identifier: 123
   user: vallblanca
   pass: openbravo
  . login is done

. in device1:
  . go to webpos, with link: hosted/context/web/org.openbravo.retail.posterminal/#
  . login is done
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]
blocks defect 0030869 closedguilleaer Terminal authentication is allowing to connect from two distinct devices 

-  Notes
(0082656)
hgbot (developer)
2015-12-10 22:18

 Repository: retail/backports/3.0RR15Q4.1/org.openbravo.retail.posterminal
Changeset: 7f73eebbc7ed6f758044bc555474e917c72dc57a
Author: Guillermo Alvarez de Eulate <guillermo.alvarez <at> openbravo.com>
Date: Wed Dec 09 19:30:22 2015 +0100
URL: http://code.openbravo.com/retail/backports/3.0RR15Q4.1/org.openbravo.retail.posterminal/rev/7f73eebbc7ed6f758044bc555474e917c72dc57a [^]

Fixed issue 31497: Terminal authemntication improvements have been added:

- Unique id for each cache session has been added
- When a terminal is linked cache session id is stores at terminal level
- Once a terminal try to link the cache session id is checked

---
M src-db/database/model/tables/OBPOS_APPLICATIONS.xml
M src-db/database/sourcedata/AD_COLUMN.xml
M src-db/database/sourcedata/AD_ELEMENT.xml
M src-db/database/sourcedata/AD_FIELD.xml
M src/org/openbravo/retail/posterminal/CheckTerminalAuth.java
M src/org/openbravo/retail/posterminal/LoginUtilsServlet.java
M src/org/openbravo/retail/posterminal/process/UnlinkDeviceActionHandler.java
M web/org.openbravo.retail.posterminal/js/components/modalselectterminal.js
M web/org.openbravo.retail.posterminal/js/login/model/login-model.js
---

- Issue History
Date Modified Username Field Change
2015-11-16 13:19 marvintm Type defect => backport
2015-11-16 13:19 marvintm Target Version => RR15Q4.1
2015-12-10 22:18 hgbot Checkin
2015-12-10 22:18 hgbot Note Added: 0082656
2015-12-10 22:18 hgbot Status scheduled => resolved
2015-12-10 22:18 hgbot Resolution open => fixed
2015-12-10 22:18 hgbot Fixed in SCM revision http://code.openbravo.com/erp/pmods/org.openbravo.retail.posterminal/rev/c4c55341720182737a661e17ff09d70898ba07c8 [^] => http://code.openbravo.com/retail/backports/3.0RR15Q4.1/org.openbravo.retail.posterminal/rev/7f73eebbc7ed6f758044bc555474e917c72dc57a [^]
2015-12-11 13:37 marvintm Status resolved => closed
2015-12-11 13:37 marvintm Fixed in Version => RR15Q4.1

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker