Project:
View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||||||
ID | ||||||||||||
0038242 | ||||||||||||
Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||||||
defect | [Retail Modules] Loyalty Management for Retail | minor | always | 2018-03-28 11:22 | 2018-03-28 11:22 | |||||||
Reporter | martinsdan | View Status | public | |||||||||
Assigned To | Retail | |||||||||||
Priority | normal | Resolution | open | Fixed in Version | ||||||||
Status | new | Fix in branch | Fixed in SCM revision | |||||||||
Projection | none | ETA | none | Target Version | ||||||||
OS | Linux 64 bit | Database | PostgreSQL | Java version | 7.x | |||||||
OS Version | Openbravo Appliance 14.04 | Database version | 9.3.x | Ant version | 1.9.x | |||||||
Product Version | SCM revision | |||||||||||
Review Assigned To | ||||||||||||
Regression level | ||||||||||||
Regression date | ||||||||||||
Regression introduced in release | ||||||||||||
Regression introduced by commit | ||||||||||||
Triggers an Emergency Pack | No | |||||||||||
Summary | 0038242: Loyalty is showing log warnings related to access | |||||||||||
Description | There are some errors related to security access in this module. The reason for this is because those classes don't reimplement the method getFormId(). 1ae2faae 2018-03-28 07:36:59,000 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.LoyaltyManagement 1ae2faae 2018-03-28 07:36:59,082 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.LoyaltyProgram 1ae2faae 2018-03-28 07:36:59,176 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.AccumulationRules 1ae2faae 2018-03-28 07:36:59,262 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.RedemptionRules 1ae2faae 2018-03-28 07:36:59,596 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.implementation.master.LoyaltyBusinessPartnerCard | |||||||||||
Steps To Reproduce | Login to the POS and the warnings will be visible in the log. | |||||||||||
Proposed Solution | Change those classes to extend org.openbravo.retail.posterminal.ProcessHQLQuery instead of org.openbravo.mobile.core.process.ProcessHQLQuery. This way the access control will be done based on the POS Form. | |||||||||||
Tags | No tags attached. | |||||||||||
Attached Files | ||||||||||||
Relationships [ Relation Graph ] [ Dependency Graph ] | |
Issue History | |||
Date Modified | Username | Field | Change |
2018-03-28 11:22 | martinsdan | New Issue | |
2018-03-28 11:22 | martinsdan | Assigned To | => Retail |
2018-03-28 11:22 | martinsdan | Triggers an Emergency Pack | => No |
Copyright © 2000 - 2009 MantisBT Group |