Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0031498
TypeCategorySeverityReproducibilityDate SubmittedLast Update
backport[Retail Modules] Web POSmajoralways2015-09-18 10:032015-12-04 12:52
ReportermalsasuaView Statuspublic 
Assigned Toguilleaer 
PriorityhighResolutionfixedFixed in VersionRR15Q3.3
StatusclosedFix in branchFixed in SCM revisiona5e655307b0a
ProjectionnoneETAnoneTarget VersionRR15Q3.3
OSLinux 32 bitDatabasePostgreSQLJava version1.6.0_18
OS VersionCommunity ApplianceDatabase version8.3.9Ant version1.7.1
Product VersionRR15Q3SCM revision 
Merge Request Status
Review Assigned Tomarvintm
OBNetwork customerOBPS
Support ticket38178
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0031498: Terminal authentication is allowing to connect from two distinct devices

DescriptionThere is one way to link two devices to the same terminal
Steps To Reproduce. configure to enable terminal authentication
 . in backoffice, as system administrator, change the preference "enable authention" to Y
. in backoffice, in POS Terminal -> VBS-1
    Terminal Key Identifier: 123

. in device1:
  . go to WEBPOS, to terminal VBS-1
  . popup with the next fields are displayed:
   Terminal Key Identifier: 123
   user: vallblanca
   pass: openbravo
  . login is done

. go to backoffice
 . check "is link to device" is checked
 . click button "unlink device"
 . check "is link to device" is unchecked

. in device2:
  . go to WEBPOS, to terminal VBS-1
  . popup with the next fields are displayed:
   Terminal Key Identifier: 123
   user: vallblanca
   pass: openbravo
  . login is done

. in device1:
  . go to webpos, with link: hosted/context/web/org.openbravo.retail.posterminal/#
  . login is done
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]
blocks defect 0030869 closedguilleaer Terminal authentication is allowing to connect from two distinct devices 

-  Notes
(0082562)
hgbot (developer)
2015-12-03 13:21

 Repository: retail/backports/3.0RR15Q3.3/org.openbravo.retail.posterminal
Changeset: a5e655307b0a149f9dfaaea76a48e6bf2ebf4d9b
Author: Guillermo Alvarez de Eulate <guillermo.alvarez <at> openbravo.com>
Date: Wed Dec 02 21:55:40 2015 +0100
URL: http://code.openbravo.com/retail/backports/3.0RR15Q3.3/org.openbravo.retail.posterminal/rev/a5e655307b0a149f9dfaaea76a48e6bf2ebf4d9b [^]

Fixed issue 31498: Terminal authentication improvements have been added:

- Unique id for each cache session has been added
- When a terminal is linked cache session id is stores at terminal level
- Once a terminal try to link the cache session id is checked

---
M src-db/database/model/tables/OBPOS_APPLICATIONS.xml
M src-db/database/sourcedata/AD_COLUMN.xml
M src-db/database/sourcedata/AD_ELEMENT.xml
M src-db/database/sourcedata/AD_FIELD.xml
M src/org/openbravo/retail/posterminal/CheckTerminalAuth.java
M src/org/openbravo/retail/posterminal/LoginUtilsServlet.java
M src/org/openbravo/retail/posterminal/process/UnlinkDeviceActionHandler.java
M web/org.openbravo.retail.posterminal/js/components/modalselectterminal.js
M web/org.openbravo.retail.posterminal/js/login/model/login-model.js
---

- Issue History
Date Modified Username Field Change
2015-11-16 13:19 marvintm Type defect => backport
2015-11-16 13:19 marvintm Target Version => RR15Q3.3
2015-12-03 13:21 hgbot Checkin
2015-12-03 13:21 hgbot Note Added: 0082562
2015-12-03 13:21 hgbot Status scheduled => resolved
2015-12-03 13:21 hgbot Resolution open => fixed
2015-12-03 13:21 hgbot Fixed in SCM revision http://code.openbravo.com/erp/pmods/org.openbravo.retail.posterminal/rev/c4c55341720182737a661e17ff09d70898ba07c8 [^] => http://code.openbravo.com/retail/backports/3.0RR15Q3.3/org.openbravo.retail.posterminal/rev/a5e655307b0a149f9dfaaea76a48e6bf2ebf4d9b [^]
2015-12-04 12:52 marvintm Status resolved => closed
2015-12-04 12:52 marvintm Fixed in Version => RR15Q3.3

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker