Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0052309
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Modules] Freight Managementmajoralways2023-05-02 20:202023-05-19 14:48
ReporteraxelmercadoView Statuspublic 
Assigned Totonialcaide 
PriorityhighResolutionfixedFixed in Version
StatusclosedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Statusapproved
Regression date
Regression introduced by commit
Regression level
Review Assigned To
Support ticket61763
OBNetwork customerOBPS
Regression introduced in release
Summary

0052309: Error when deleting more than 1 record with user with manual role.

DescriptionWhen a user with a manual role tries to delete more than one line in the Sales Order window, it generates the error shown in the attached image.
Steps To Reproduce1- Log in with a user with a manual role.
2- Go to the "Sales Order" window and select a record containing many lines.
3- If you try to delete more than 1, the following error occurs: "With your current role this action is not allowed".
Proposed SolutionAs Augusto from the Platform team observed, the problem is in the org.openbravo.materialmgmt.freightmgmt module, specifically here [1] where it tries to access the getProductType() method of Product without having write permission (in that case only the id and identifier can be accessed).
 
[1] https://gitlab.com/openbravo/product/pmods/org.openbravo.materialmgmt.freightmgmt/-/blob/master/src/org/openbravo/materialmgmt/freightmgmt/event/SalesOrderEventHandler.java#L72 [^]

You may need to add a setAdminMode block in that event handler.
TagsNo tags attached.
Attached Filespng file icon caperror.png [^] (391,792 bytes) 2023-05-02 20:20

- Relationships [ Relation Graph ] [ Dependency Graph ]

-  Notes
(0149967)
hgbot (developer)
2023-05-19 10:31

 Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/886 [^]
(0149995)
hgbot (developer)
2023-05-19 14:48

 Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/886 [^]
(0149996)
hgbot (developer)
2023-05-19 14:48

 Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/openbravo [^]
Changeset: 4cc1a519407b2d9bb80f4447fa6e3f6baa39b8e9
Author: Toni Alcaide <antonio.alcaide@openbravo.com>
Date: 19-05-2023 10:29:18
URL: https://gitlab.com/openbravo/product/openbravo/-/commit/4cc1a519407b2d9bb80f4447fa6e3f6baa39b8e9 [^]

Fixed ISSUE-52309: Admin mode set to MultipleDeleteActionHandler to prevent OBSecurityException when deleting more than one row. For single deletes, a similar workaround has been made in the DefaultDataSourceService.remove method

---
M modules/org.openbravo.client.application/src/org/openbravo/client/application/MultipleDeleteActionHandler.java
---

- Issue History
Date Modified Username Field Change
2023-05-02 20:20 axelmercado New Issue
2023-05-02 20:20 axelmercado Assigned To => Triage Omni OMS
2023-05-02 20:20 axelmercado File Added: caperror.png
2023-05-02 20:20 axelmercado Support ticket => 61763
2023-05-02 20:20 axelmercado OBNetwork customer => OBPS
2023-05-02 20:21 axelmercado Assigned To Triage Omni OMS => vmromanos
2023-05-02 21:38 Practics Issue Monitored: Practics
2023-05-03 08:12 vmromanos Assigned To vmromanos => Triage Omni WMS
2023-05-04 10:51 mtaal Assigned To Triage Omni WMS => tonialcaide
2023-05-19 10:31 hgbot Merge Request Status => open
2023-05-19 10:31 hgbot Note Added: 0149967
2023-05-19 14:36 hgbot Merge Request Status open => approved
2023-05-19 14:48 hgbot Resolution open => fixed
2023-05-19 14:48 hgbot Status new => closed
2023-05-19 14:48 hgbot Note Added: 0149995
2023-05-19 14:48 hgbot Fixed in Version => PR23Q3
2023-05-19 14:48 hgbot Note Added: 0149996

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker