Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0052851
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] B. User interfacemajoralways2023-06-26 16:152023-07-20 12:15
Reporterkousalya_rView Statuspublic 
Assigned Tomeriem_azaf 
PrioritynormalResolutionfixedFixed in VersionPR23Q4
StatusclosedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Statusapproved
Review Assigned To
OBNetwork customerGold
Web browser
ModulesCore
Support ticket66744
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0052851: Invalid Role error accesing to WebPOS with an User with no Backend access

DescriptionAn User with a single active Role with restricted backend access should not be able to Log in into the backend but it should be able to access other applications such as the WebPOS. However, when attempting to log in into WebPOS the request returns the following error:

"No valid Role identified. Please contact your system administrator for access"
Steps To ReproduceIn Backend
- Login with Openbravo user
- Switch to "The White Valley Group Admin" role
- Go to User Window
- Select 'vallblanca' user
- In User Roles subtab:
  - Unset the Active flag to "VallblancaManual"
  - Edit "VallblancaUser" entry
    - Go to "VallBlancaUser" Role Window
    - Check "Restrict backend access" and save

In WebPOS
- Attempt to login with user 'vallblanca'

It should login normally as this user has the Role 'VallBlancaUser' and is valid, however it will show the "No Valid Role identified" error. Notice that if you uncheck the "Restrict backend access" flag to "VallBlancaUser" Role and save, now you should be able to login into WebPOS.
TagsNo tags attached.
Attached Filespng file icon Screenshot from 2023-06-26 19-26-44.png [^] (32,106 bytes) 2023-06-26 16:15

- Relationships [ Relation Graph ] [ Dependency Graph ]

-  Notes
(0152636)
hgbot (developer)
2023-07-18 16:05

 Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/947 [^]
(0152720)
hgbot (developer)
2023-07-20 12:14

 Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/openbravo [^]
Changeset: 7a4726d3d8980138840b69058dfacd2c011350b6
Author: Meriem Azaf <meriem.azaf@openbravo.com>
Date: 20-07-2023 10:14:34
URL: https://gitlab.com/openbravo/product/openbravo/-/commit/7a4726d3d8980138840b69058dfacd2c011350b6 [^]

Fixes ISSUE-52851: Invalid Role error accesing to WebPOS with an User with no Backend access

An User with a single active Role with restricted backend access should not be able to Log in into the backend but it should be able to access other applications such as the WebPOS. However, when attempting to log in into WebPOS the request returns the following error: "No valid Role identified. Please contact your system administrator for access".

The problem here that withe the restricted backend acces we are not checking if the role is active or not.

So we added this part in the function checkLicenseAndGo in the LoginHandler.

---
M src/org/openbravo/base/secureApp/LoginHandler.java
---
(0152721)
hgbot (developer)
2023-07-20 12:15

 Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/947 [^]

- Issue History
Date Modified Username Field Change
2023-06-26 16:15 kousalya_r New Issue
2023-06-26 16:15 kousalya_r Assigned To => Triage Platform Base
2023-06-26 16:15 kousalya_r File Added: Screenshot from 2023-06-26 19-26-44.png
2023-06-26 16:15 kousalya_r OBNetwork customer => Gold
2023-06-26 16:15 kousalya_r Modules => Core
2023-06-26 16:15 kousalya_r Support ticket => 66744
2023-06-26 16:15 kousalya_r Triggers an Emergency Pack => No
2023-07-06 18:03 jarmendariz Summary User Login Issue with Restrict backend access => Invalid Role error accesing to WebPOS with an User with no Backend access
2023-07-06 18:03 jarmendariz Description Updated View Revisions
2023-07-06 18:03 jarmendariz Steps to Reproduce Updated View Revisions
2023-07-13 08:07 jarmendariz Status new => acknowledged
2023-07-18 16:05 hgbot Merge Request Status => open
2023-07-18 16:05 hgbot Note Added: 0152636
2023-07-20 02:08 jarmendariz Assigned To Triage Platform Base => meriem_azaf
2023-07-20 02:08 jarmendariz Status acknowledged => scheduled
2023-07-20 12:14 hgbot Merge Request Status open => approved
2023-07-20 12:14 hgbot Resolution open => fixed
2023-07-20 12:14 hgbot Status scheduled => closed
2023-07-20 12:14 hgbot Fixed in Version => PR23Q4
2023-07-20 12:14 hgbot Note Added: 0152720
2023-07-20 12:15 hgbot Note Added: 0152721

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker