Project:
| View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||||||
| ID | ||||||||||||
| 0049303 | ||||||||||||
| Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||||||
| design defect | [Modules] Reporting | major | have not tried | 2022-05-12 08:41 | 2022-05-12 08:41 | |||||||
| Reporter | mtaal | View Status | public | |||||||||
| Assigned To | mtaal | |||||||||||
| Priority | normal | Resolution | open | Fixed in Version | ||||||||
| Status | new | Fix in branch | Fixed in SCM revision | |||||||||
| Projection | none | ETA | none | Target Version | ||||||||
| OS | Any | Database | Any | Java version | ||||||||
| OS Version | Database version | Ant version | ||||||||||
| Product Version | SCM revision | |||||||||||
| Regression date | ||||||||||||
| Regression introduced by commit | ||||||||||||
| Regression level | ||||||||||||
| Review Assigned To | ||||||||||||
| Regression introduced in release | ||||||||||||
| Summary | 0049303: Max supported allowed organization in SSO limited to 50 | |||||||||||
| Description | Currently we pass the list of readable organizations from Openbravo to the reporting server as a url parameter. There are often restrictions in the number of organizations we can pass due to url length. Therefore we do not send more than 50. If there are more then no organization is send and the data of all organizations is visible for the user. A warning [1] is printed in the log in that case. [1] 2022-05-08 18:56:30,518 [http-478] WARN org.openbravo.reporting.integration.utils.ReportingIntegrationUtils - User Belen DIAZ ECEIZA has more than 50 namely: 98 readable orgs, assuming he/she can see all orgs in reporting server | |||||||||||
| Steps To Reproduce | Have a user with more than 50 allowed organizations assigned to him/her. Open a report in the backoffice. | |||||||||||
| Proposed Solution | Instead of passing the list of organizations in a url parameter and doing GET, do a POST and pass the parameters as POST variables. Two modules are involved: org.openbravo.reporting.integration org.openbravo.reporting.integration.retail The relevant code links: https://gitlab.com/openbravo/product/pmods/org.openbravo.reporting.integration/-/blob/master/src/org/openbravo/reporting/integration/utils/ReportingIntegrationUtils.java#L205 [^] https://gitlab.com/openbravo/product/pmods/org.openbravo.reporting.integration/-/blob/master/src/org/openbravo/reporting/integration/reportservice/ReportServiceActionHandler.java#L130 [^] POS Client Side code: https://gitlab.com/openbravo/product/pmods/org.openbravo.reporting.integration.retail/-/blob/master/web/org.openbravo.reporting.integration.retail/js/ob-touchpoint-report-menu.js#L255 [^] Backoffice client side code building the iframe: https://gitlab.com/openbravo/product/pmods/org.openbravo.reporting.integration/-/blob/master/web/org.openbravo.reporting.integration/js/ob-open-jasper-report-view.js#L10 [^] | |||||||||||
| Tags | No tags attached. | |||||||||||
| Attached Files | ||||||||||||
 Relationships [ Relation Graph ]
[ Dependency Graph ]
|
|
 Relationships |
|
Notes |
|
| There are no notes attached to this issue. |
|
Notes |
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2022-05-12 08:41 | mtaal | New Issue | |
| 2022-05-12 08:41 | mtaal | Assigned To | => mtaal |
|
Issue History |
| Copyright © 2000 - 2009 MantisBT Group |
 |