Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0035195
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Retail Modules] Web POSmajoralways2017-02-08 12:332017-03-08 15:49
ReporteraaroncaleroView Statuspublic 
Assigned Tomigueldejuana 
PrioritynormalResolutionfixedFixed in VersionRR17Q2
StatusclosedFix in branchFixed in SCM revision1274265bf27e
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Status
Review Assigned Tomarvintm
OBNetwork customerOBPS
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0035195: OBSecurity exception thrown when a cashup is processed

DescriptionIt is possible the login in a web pos terminal, having the cashup from a different store. When this cashup is processed, an OBSecurityException is thrown, because at some point during the cashup processing, a FIN_Finacc_Transaction is created pointing to a cashup from a different organization.
Steps To ReproduceLogin in web pos in terminal VBS-1.
Verify the value of OB.UTIL.localStorage.getItem('loggedTerminalName') on the browser console. It should be VBS-1.
Logout. The value of OB.UTIL.localStorage.getItem('loggedTerminalName') should still be VBS-1.
Change the url of the terminal to PS-1. The value of OB.UTIL.localStorage.getItem('loggedTerminalName') should still be VBS-1.
Login in the PS-1 terminal.
Verify the value of OB.UTIL.localStorage.getItem('loggedTerminalName') on the browser console. Now it will be null.
Change the url of the terminal to VBS-1.
The application will reload, the url will point to VBS-1, but the loaded application will point to PS-1 (verify the documentNo of the open receipt).
Create a new ticket, add a product, and pay it.
Lock screen. The login screen will show the VBS-1 terminal users.
Login.
Do a cashup.
Go to the backend and verify the Errors While Importing POS Data window. There will be a new cashup entry with the following error:
org.openbravo.base.exception.OBSecurityException: Entity Cashbook - Vall Blanca Store - EUR - - 10234 - 350 (FIN_Finacc_Transaction) with organization Vall Blanca Store references an entity Vall Blanca Store User - 08-02-2017 11:51:22 through its property obposAppCashup but this referenced entity belongs to an organization Posets Store which is not part of the natural tree of Vall Blanca Store
TagsNo tags attached.
Attached Files? file icon issue35195_MobileCore.commit [^] (1,518 bytes) 2017-02-24 10:22
? file icon issue35195PiMobile.commit [^] (3,282 bytes) 2017-02-24 10:22

- Relationships [ Relation Graph ] [ Dependency Graph ]

-  Notes
(0094826)
hgbot (developer)
2017-03-08 12:37

 Repository: erp/pmods/org.openbravo.mobile.core
Changeset: fbcd9a9beb28e2d3a6022448d0d29b85894cdf33
Author: Miguel de Juana <miguel.dejuana <at> openbravo.com>
Date: Thu Feb 23 09:21:12 2017 +0100
URL: http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/fbcd9a9beb28e2d3a6022448d0d29b85894cdf33 [^]

Fixed issue 0035195: OBSecurity exception thrown when a cashup is processed

- Loading the login window, check if terminal changed and in case, clean the terminal

---
M web/org.openbravo.mobile.core/source/component/ob-login.js
---
(0094827)
hgbot (developer)
2017-03-08 12:38

 Repository: tools/automation/pi-mobile
Changeset: 1274265bf27efca1c78ff639864b5132664af260
Author: Miguel de Juana <miguel.dejuana <at> openbravo.com>
Date: Thu Feb 23 09:22:46 2017 +0100
URL: http://code.openbravo.com/tools/automation/pi-mobile/rev/1274265bf27efca1c78ff639864b5132664af260 [^]

Fixed issue 0035195: OBSecurity exception thrown when a cashup is processed

- Loading the login window, check if terminal changed and in case, clean the terminal
- Add a test for this issue

---
A src-test/org/openbravo/test/mobile/retail/pack/selenium/tests/loginout/I35195_TerminalChangeAllowed.java
---

- Issue History
Date Modified Username Field Change
2017-02-08 12:33 aaroncalero New Issue
2017-02-08 12:33 aaroncalero Assigned To => Retail
2017-02-08 12:33 aaroncalero OBNetwork customer => Yes
2017-02-08 12:33 aaroncalero Resolution time => 1487718000
2017-02-08 12:33 aaroncalero Triggers an Emergency Pack => No
2017-02-09 15:20 migueldejuana Assigned To Retail => migueldejuana
2017-02-09 15:20 migueldejuana Status new => scheduled
2017-02-24 10:22 migueldejuana File Added: issue35195_MobileCore.commit
2017-02-24 10:22 migueldejuana File Added: issue35195PiMobile.commit
2017-03-08 12:37 hgbot Checkin
2017-03-08 12:37 hgbot Note Added: 0094826
2017-03-08 12:37 hgbot Status scheduled => resolved
2017-03-08 12:37 hgbot Resolution open => fixed
2017-03-08 12:37 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/fbcd9a9beb28e2d3a6022448d0d29b85894cdf33 [^]
2017-03-08 12:38 hgbot Checkin
2017-03-08 12:38 hgbot Note Added: 0094827
2017-03-08 12:38 hgbot Fixed in SCM revision http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/fbcd9a9beb28e2d3a6022448d0d29b85894cdf33 [^] => http://code.openbravo.com/tools/automation/pi-mobile/rev/1274265bf27efca1c78ff639864b5132664af260 [^]
2017-03-08 15:49 marvintm Review Assigned To => marvintm
2017-03-08 15:49 marvintm Status resolved => closed
2017-03-08 15:49 marvintm Fixed in Version => RR17Q2

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker