Anonymous | Login

Project:

News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ]

[ Issue History ] [ Print ]

ID

0000467

Type

Category

Severity

Reproducibility

Date Submitted

Last Update

defect

[Openbravo ERP] C. Security

major

always

2008-05-28 20:15

2008-07-01 17:56

Reporter

psarobe

View Status

public

Assigned To

alostale

Priority

urgent

Resolution

fixed

Fixed in Version

2.40alpha-r3

Status

closed

Fix in branch

Fixed in SCM revision

Projection

none

ETA

none

Target Version

2.40

OS

Any

Database

Any

Java version

OS Version

Database version

Ant version

Product Version

2.40alpha-r2

SCM revision

Merge Request Status

Review Assigned To

OBNetwork customer

No

Web browser

Modules

Core

Support ticket

Regression level

Regression date

Regression introduced in release

Regression introduced by commit

Triggers an Emergency Pack

No

Summary

0000467: Organization (*) when user level=Organization and Access level=Client/Organization

Description

When the conditions are "user level"(Role)=Organization and "Access level"(Table)=Client/Organization you should be able to see/access to all the records that are created in the organizations that belong to the tree where the role has access to.
This works but not for Organization (*) that obviously belongs to that tree. Right now under these conditions you cannot see records created in organization (*) and you should

Steps To Reproduce

1. Create a role with user level=Organization
2. Give the role access to an organization different than (*)

Go to Master data management->Product. With that role you are not able to see records created in (*). You should be able to see them but not edit

Tags

No tags attached.

Relationships [ Relation Graph ] [ Dependency Graph ]

Notes
(0000401) svnbot (viewer) 2008-06-02 09:05	Repository: openbravo Revision: 4708 Author: alostale Date: 2008-06-02 09:05:27 +0200 (Mon, 02 Jun 2008) fixed bug 0000467: #AccessibleOrgTree should always contain organization * because it is always accessible although not editable --- U trunk/src/org/openbravo/erpCommon/utility/Utility.java --- https://dev.openbravo.com/websvn/openbravo/?rev=4708&sc=1 [^]

(0000419) cheli (viewer) 2008-06-03 13:03	Two comments. I have probe the bug fix and it works but... 1:- When I try to modify a product from * organization I can not edit it, if I try to do that (for example trying to write in a textbox) the save buttons get enabled although if a push one of them a get this error "With your current role you don't have write permission." It would be nice if "save buttons" don't get enabled in this scenario. 2:- If I try to insert a new product with a role I'm not able to write in * organization, the combobox "organization doesn't show me * but if a select one organization then it do show me the * org. I think the callout is the responsible of this issue.

(0000421) alostale (viewer) 2008-06-03 15:30	I've reported two bugs about these issues: 1 0000535 and 2 #536 I encourage you not to report these kind of issues as comments in solved items but reporting new ones, thank you.

Issue History
Date Modified	Username	Field	Change
2008-05-28 20:15	psarobe	New Issue
2008-05-28 20:15	psarobe	Assigned To	=> alostale
2008-05-28 20:15	psarobe	OBNetwork customer	=> N
2008-06-02 09:05	svnbot	Checkin
2008-06-02 09:05	svnbot	Note Added: 0000401
2008-06-02 09:05	svnbot	Status	new => resolved
2008-06-02 09:05	svnbot	Resolution	open => fixed
2008-06-02 09:05	svnbot	svn_revision	=> 4708
2008-06-03 13:03	cheli	Note Added: 0000419
2008-06-03 15:30	alostale	Note Added: 0000421
2008-06-11 12:46	cromero	Target Version	=> 2.40
2008-06-11 14:33	cromero	Fixed in Version	=> 2.40alpha r3
2008-06-19 11:55	plujan	Status	resolved => closed
2008-07-01 17:56	anonymous	sf_bug_id	0 => 2007902

Copyright © 2000 - 2009 MantisBT Group