Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0035400
TypeCategorySeverityReproducibilityDate SubmittedLast Update
backport[Openbravo ERP] A. Platformminoralways2017-03-01 16:482017-03-03 10:39
ReporteregoitzView Statuspublic 
Assigned Tocaristu 
PrioritynormalResolutionfixedFixed in Version3.0PR16Q3.6
StatusclosedFix in branchFixed in SCM revision9e434382ef9c
ProjectionnoneETAnoneTarget Version3.0PR16Q3.6
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Status
Review Assigned Toalostale
OBNetwork customerOBPS
Web browser
ModulesCore
Support ticket
Regression levelProduction - Confirmed Stable
Regression date2015-11-17
Regression introduced in release3.0PR16Q1
Regression introduced by commithttps://code.openbravo.com/erp/devel/pi/rev/2c0caa49fcc0792e77c29ad705fe662b1eaf12d3 [^]
Triggers an Emergency PackNo
Summary

0035400: Not possible to get on the webservice regions of a country when those are defined to client 0.

DescriptionHaving both the countrys and regions (and translations) defined for Client System (0), when getting using xml rest webservices the information for the country, the regions are not shown on the response.
Steps To Reproduce-Access as system adminitrator and define a new region for country spain
-Logout and login with QA testing client.
-Go to the country and region window and see on the region tab that the new region for spain is shown.
-Access to the webservice
/ws/dal/Country/106
and the region is not shown.
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]
blocks defect 0035397 closedcaristu Not possible to get on the webservice regions of a country when those are defined to client 0. 

-  Notes
(0094677)
hgbot (developer)
2017-03-02 10:17

 Repository: erp/backports/3.0PR16Q3.6
Changeset: 9e434382ef9c2b3c38221acf529b24437888089b
Author: Carlos Aristu <carlos.aristu <at> openbravo.com>
Date: Thu Mar 02 10:16:54 2017 +0100
URL: http://code.openbravo.com/erp/backports/3.0PR16Q3.6/rev/9e434382ef9c2b3c38221acf529b24437888089b [^]

fixes issue 35400: Check readable clients for child properties using DAL WS

Fix for issue 0029683 was introducing a security check to avoid showing child properties which belong to a client different from the current client. But this fix was preventing to display some readable objects like master data defined at system level (client 0).

Therefore this security check has been improved and now it is verified if the child property is defined for a client which is readable for the current role.

---
M src/org/openbravo/dal/xml/EntityXMLConverter.java
M src/org/openbravo/service/rest/DalWebService.java
---
(0094720)
alostale (viewer)
2017-03-03 10:39

 code reviewed + tested

- Issue History
Date Modified Username Field Change
2017-03-01 17:30 caristu Type defect => backport
2017-03-01 17:30 caristu Target Version => 3.0PR16Q3.6
2017-03-02 10:17 hgbot Checkin
2017-03-02 10:17 hgbot Note Added: 0094677
2017-03-02 10:17 hgbot Status scheduled => resolved
2017-03-02 10:17 hgbot Resolution open => fixed
2017-03-02 10:17 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/backports/3.0PR16Q3.6/rev/9e434382ef9c2b3c38221acf529b24437888089b [^]
2017-03-02 10:19 caristu Review Assigned To => alostale
2017-03-03 10:39 alostale Note Added: 0094720
2017-03-03 10:39 alostale Status resolved => closed
2017-03-03 10:39 alostale Fixed in Version => 3.0PR16Q3.6

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker