Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0037867
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] A. Platformminorhave not tried2018-02-09 10:542018-02-22 18:19
ReporterAugustoMauchView Statuspublic 
Assigned ToAugustoMauch 
PrioritynormalResolutionfixedFixed in Version3.0PR18Q2
StatusclosedFix in branchFixed in SCM revision3d95f9654e98
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Status
Review Assigned Tocaristu
OBNetwork customerNo
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0037867: Missing admin mode in HQLDataSourceService

DescriptionThere is a missing admin mode in HQLDataSourceService.getTableFromParameters. Usually this issue is not reproducible because the user's role has readable access to the AD_TABLE table, but if the user has limited access an exception will be thrown.
Steps To ReproduceCreate a role with very limited access:
- User Level: Client + Organization
- Manual: True
- Org Access: All
- User Assignment: Openbravo
- Window Access: Return From Customer, Editable Field = true

Log in with Openbravo, switch to the new role.
- Open the Return from Customer window
- Create a record in the header tab
- Click on the Pick/Edit Lines button. The following error will be shown in the console:

425945 [http-bio-8080-exec-9] ERROR org.openbravo.base.exception.OBSecurityException - Entity ADTable is not readable by the user 100
org.openbravo.base.exception.OBSecurityException: Entity ADTable is not readable by the user 100
    at org.openbravo.dal.security.EntityAccessChecker.checkReadable(EntityAccessChecker.java:343)
    at org.openbravo.dal.service.OBDal.checkReadAccess(OBDal.java:596)
    at org.openbravo.dal.service.OBDal.checkReadAccess(OBDal.java:583)
    at org.openbravo.dal.service.OBDal.get(OBDal.java:297)
    at org.openbravo.service.datasource.HQLDataSourceService.getTableFromParameters(HQLDataSourceService.java:223)
    at org.openbravo.service.datasource.HQLDataSourceService.getData(HQLDataSourceService.java:161)
    at org.openbravo.service.datasource.ReadOnlyDataSourceService.fetchJSONObject(ReadOnlyDataSourceService.java:135)
    at org.openbravo.service.datasource.ReadOnlyDataSourceService.fetch(ReadOnlyDataSourceService.java:68)
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]

-  Notes
(0102298)
hgbot (developer)
2018-02-09 10:56

 Repository: erp/devel/pi
Changeset: 3d95f9654e988bdddbfe214ccfdd12a396fa9af7
Author: Augusto Mauch <augusto.mauch <at> openbravo.com>
Date: Fri Feb 09 10:56:05 2018 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/3d95f9654e988bdddbfe214ccfdd12a396fa9af7 [^]

Fixes issue 37867: Adds missing admin mode

---
M modules/org.openbravo.service.datasource/src/org/openbravo/service/datasource/HQLDataSourceService.java
---
(0102301)
hgbot (developer)
2018-02-09 11:37

 Repository: erp/devel/pi
Changeset: 05d03896eb4a7a415509660f15eada0ed1d7a27b
Author: Augusto Mauch <augusto.mauch <at> openbravo.com>
Date: Fri Feb 09 11:36:42 2018 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/05d03896eb4a7a415509660f15eada0ed1d7a27b [^]

Related with issue 37867: Commented out code meant for debug has been restored

---
M modules/org.openbravo.service.datasource/src/org/openbravo/service/datasource/HQLDataSourceService.java
---
(0102329)
caristu (viewer)
2018-02-12 12:24

 Code reviewed + tested OK.
(0102740)
hudsonbot (viewer)
2018-02-22 18:19

 A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/980a6ad5bbf5 [^]
Maturity status: Test
(0102742)
hudsonbot (viewer)
2018-02-22 18:19

 A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/980a6ad5bbf5 [^]
Maturity status: Test

- Issue History
Date Modified Username Field Change
2018-02-09 10:54 AugustoMauch New Issue
2018-02-09 10:54 AugustoMauch Assigned To => AugustoMauch
2018-02-09 10:54 AugustoMauch OBNetwork customer => No
2018-02-09 10:54 AugustoMauch Modules => Core
2018-02-09 10:54 AugustoMauch Triggers an Emergency Pack => No
2018-02-09 10:56 AugustoMauch Review Assigned To => caristu
2018-02-09 10:56 hgbot Checkin
2018-02-09 10:56 hgbot Note Added: 0102298
2018-02-09 10:56 hgbot Status new => resolved
2018-02-09 10:56 hgbot Resolution open => fixed
2018-02-09 10:56 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/3d95f9654e988bdddbfe214ccfdd12a396fa9af7 [^]
2018-02-09 11:37 hgbot Checkin
2018-02-09 11:37 hgbot Note Added: 0102301
2018-02-12 12:24 caristu Note Added: 0102329
2018-02-12 12:24 caristu Status resolved => closed
2018-02-12 12:24 caristu Fixed in Version => 3.0PR18Q2
2018-02-22 18:19 hudsonbot Checkin
2018-02-22 18:19 hudsonbot Note Added: 0102740
2018-02-22 18:19 hudsonbot Checkin
2018-02-22 18:19 hudsonbot Note Added: 0102742

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker