0039731: Server Message Handler gets into permission error when reading the content of the message

Description

See stack trace below. Happens once a day in each store. See attached screenshot for the type of action.

org.openbravo.base.exception.OBSecurityException: Entity C_IMPORT_ENTRY is not directly readable, only id and identifier properties are readable, property C_IMPORT_ENTRY.jsonInfo is neither of these.
    at org.openbravo.base.structure.BaseOBObject.checkDerivedReadable(BaseOBObject.java:295)
    at org.openbravo.base.structure.BaseOBObject.get(BaseOBObject.java:255)
    at org.openbravo.base.structure.BaseOBObject.get(BaseOBObject.java:232)
    at org.openbravo.base.structure.BaseOBObject.get(BaseOBObject.java:213)
    at org.openbravo.service.importprocess.ImportEntry.getJsonInfo(ImportEntry.java:154)
    at org.openbravo.mobile.core.servercontroller.MobileServerMessageProcessor$MobileServerMessageRunnable.processEntry(MobileServerMessageProcessor.java:55)
    at org.openbravo.service.importprocess.ImportEntryProcessor$ImportEntryProcessRunnable.doRunCycle(ImportEntryProcessor.java:374)
    at org.openbravo.service.importprocess.ImportEntryProcessor$ImportEntryProcessRunnable.run(ImportEntryProcessor.java:295)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at java.lang.Thread.run(Thread.java:745)

Steps To Reproduce

Install multi-server close session in the cs

Proposed Solution

Add admin mode

Tags

No tags attached.

Attached Files

Relationships [ Relation Graph ] [ Dependency Graph ]

Notes
(0108214) mtaal (manager) 2018-12-02 12:46	Reproducing it: - make sure that there is a user with a role who has no access to data import entries window - let this use run Close Store in the CS - message gets synced to SS - then run direct process import entry using this same not-authorized user

(0108216) hgbot (developer) 2018-12-02 13:21	Repository: erp/pmods/org.openbravo.mobile.core Changeset: 9e43311dafa4c53c87f8b6857e7b09ee3a15e9be Author: Martin Taal <martin.taal <at> openbravo.com> Date: Sun Dec 02 13:20:52 2018 +0100 URL: http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/9e43311dafa4c53c87f8b6857e7b09ee3a15e9be [^] Fixes issue 39731: Server Message Handler gets into permission error when reading the content of the message Retrieve the import entry data in an admin block --- M src/org/openbravo/mobile/core/servercontroller/MobileServerMessageProcessor.java ---

(0108225) migueldejuana (developer) 2018-12-03 16:38	Reviewed

Issue History
Date Modified	Username	Field	Change
2018-12-02 11:08	mtaal	New Issue
2018-12-02 11:08	mtaal	Assigned To	=> mtaal
2018-12-02 11:08	mtaal	Triggers an Emergency Pack	=> No
2018-12-02 12:46	mtaal	Note Added: 0108214
2018-12-02 13:21	hgbot	Checkin
2018-12-02 13:21	hgbot	Note Added: 0108216
2018-12-02 13:21	hgbot	Status	new => resolved
2018-12-02 13:21	hgbot	Resolution	open => fixed
2018-12-02 13:21	hgbot	Fixed in SCM revision	=> http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/9e43311dafa4c53c87f8b6857e7b09ee3a15e9be [^]
2018-12-02 13:23	mtaal	Review Assigned To	=> migueldejuana
2018-12-03 16:38	migueldejuana	Note Added: 0108225
2018-12-03 16:38	migueldejuana	Status	resolved => closed