Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0054527
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Retail Modules] Web POSmajoralways2024-01-31 15:322024-04-09 09:49
ReporterXABIER_AGUADOView Statuspublic 
Assigned Tocaristu 
PrioritynormalResolutionfixedFixed in VersionRR24Q2
StatusclosedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Review Assigned To
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0054527: You can't use Reprintable Documents in POS with an user with a Manual Role

DescriptionWhen using a Manual Role we cant use Reprintable documents.

Most relevant stack line is:

at org.openbravo.mobile.core.report.ReprintableDocumentService.exec(ReprintableDocumentService.java:69) [classes/:?]

Line´s GitLab:
 https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/blob/master/src/org/openbravo/mobile/core/report/ReprintableDocumentService.java?ref_type=heads#L69 [^]

 
That process does not have a setAdminMode, so everything it executes, it does with the user's real permissions. That process ends up calling another core process, which does an explicit check of the user permissions:

modules/org.openbravo.client.application/src/org/openbravo/client/application/attachment/ReprintableDocumentManager.java · master · openbravo / product / openbravo · GitLab

As the particular user does not have read permissions for the Order entity, the process fails to retrieve the report.
Steps To ReproduceIn window Organization select 'Reprintable Documents' = ENABLED and log in on a POS using the Vall Blanca Manual role.
Do a sale on the POS
Try Reprinting the Document --> An error appears
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]
related to defect 0054753 newTriage Platform Base POS2 Missing SecuredJSONProcess securization based on user actions 
related to defect 0055124 closedcaristu Retail Modules Cannot you print a duplicate for a ticket from another store (Cross Store) with Inmutable reports/reprintable Documents 
blocks backport 0055079RR24Q1.2 closedTriage Platform Conn Retail Modules You can't use Reprintable Documents in POS with an user with a Manual Role 

-  Notes
(0160651)
hgbot (developer)
2024-02-12 18:07

 Merge Request created: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/merge_requests/663 [^]
(0160704)
hgbot (developer)
2024-02-13 18:28

 Merge request merged: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/merge_requests/663 [^]
(0160705)
hgbot (developer)
2024-02-13 18:28

 Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core [^]
Changeset: a1dce7701bb5e3f9b20ac82b92a362eb94dc00d2
Author: Adrián Romero <adrian.romero@openbravo.com>
Date: 12-02-2024 18:06:04
URL: https://gitlab.com/openbravo/product/pmods/org.openbravo.mobile.core/-/commit/a1dce7701bb5e3f9b20ac82b92a362eb94dc00d2 [^]

Fixes ISSUE-0054527: You can't use Reprintable Documents in POS with an user with a Manual Role
* Wraps ReprintableDocumentService with Admin Mode. The securization of reprintable documents must go to the User Action that invokes the service

---
M src/org/openbravo/mobile/core/report/ReprintableDocumentService.java
---

- Issue History
Date Modified Username Field Change
2024-01-31 15:32 XABIER_AGUADO New Issue
2024-01-31 15:32 XABIER_AGUADO Assigned To => Retail
2024-01-31 15:32 XABIER_AGUADO Triggers an Emergency Pack => No
2024-02-06 13:44 guillermogil Assigned To Retail => Triage Platform Base
2024-02-08 17:56 caristu Relationship added depends on 0054625
2024-02-08 17:58 caristu Relationship deleted depends on 0054625
2024-02-09 09:02 adrianromero Assigned To Triage Platform Base => Triage Platform Conn
2024-02-12 18:07 hgbot Note Added: 0160651
2024-02-13 18:28 hgbot Note Added: 0160704
2024-02-13 18:28 hgbot Resolution open => fixed
2024-02-13 18:28 hgbot Status new => closed
2024-02-13 18:28 hgbot Fixed in Version => RR24Q2
2024-02-13 18:28 hgbot Note Added: 0160705
2024-02-23 09:56 caristu Relationship added related to 0054752
2024-02-26 16:01 caristu Relationship deleted related to 0054752
2024-02-26 16:04 caristu Relationship added related to 0054753
2024-04-02 17:16 adrianromero Issue cloned 0055079
2024-04-02 17:16 adrianromero Relationship added blocks 0055079
2024-04-08 13:50 rafaroda Relationship added related to 0055124
2024-04-09 09:49 adrianromero Assigned To Triage Platform Conn => caristu

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker