Project:
| View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||||||
| ID | ||||||||||||
| 0054685 | ||||||||||||
| Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||||||
| defect | [Openbravo ERP] A. Platform | minor | have not tried | 2024-02-15 13:34 | 2024-02-15 13:41 | |||||||
| Reporter | shuehner | View Status | public | |||||||||
| Assigned To | shuehner | |||||||||||
| Priority | normal | Resolution | open | Fixed in Version | ||||||||
| Status | new | Fix in branch | Fixed in SCM revision | |||||||||
| Projection | none | ETA | none | Target Version | ||||||||
| OS | Any | Database | Any | Java version | ||||||||
| OS Version | Database version | Ant version | ||||||||||
| Product Version | SCM revision | |||||||||||
| Review Assigned To | ||||||||||||
| Web browser | ||||||||||||
| Modules | Core | |||||||||||
| Regression level | ||||||||||||
| Regression date | ||||||||||||
| Regression introduced in release | ||||||||||||
| Regression introduced by commit | ||||||||||||
| Triggers an Emergency Pack | No | |||||||||||
| Summary | 0054685: Do not persist access fo widget classes having Allow Anonymous Access | |||||||||||
| Description | Issue 53408 in 24Q1 release stopped persisting _ACCESS entries for role marked as automatic. Instead that case is handled in code automatically. Table obkmo_widget_class has a similar flag to mark a widget as available independent of role (allow_anonymous_access). Similar to 53408 we can remove that auto-generated _access entries as those widget classes will be allowed automatically | |||||||||||
| Steps To Reproduce | See code checking obkmo_widget_class_access for access control here: https://gitlab.com/openbravo/product/openbravo/-/blob/master/modules/org.openbravo.client.myob/src/org/openbravo/client/myob/MyOpenbravoComponent.java?ref_type=heads#L176 [^] Starting line 185 all those classes marked as allow_anonymous_access are added as available independent of the roles being manual or automatic. | |||||||||||
| Proposed Solution | Remove the _access rows for public widget_classes and persist those changes into sampledata. delete from obkmo_widget_class_access a where exists (select 1 from obkmo_widget_class c where c.obkmo_widget_class_id = a.obkmo_widget_class_id and c.allow_anonymous_access = 'Y'); | |||||||||||
| Tags | No tags attached. | |||||||||||
| Attached Files | ||||||||||||
 Relationships [ Relation Graph ]
[ Dependency Graph ]
|
||||||||
|
||||||||
 Relationships |
|
Notes |
|
|
(0160791) hgbot (developer) 2024-02-15 13:41 |
Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1143 [^] |
|
Notes |
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2024-02-15 13:34 | shuehner | New Issue | |
| 2024-02-15 13:34 | shuehner | Assigned To | => Triage Platform Base |
| 2024-02-15 13:34 | shuehner | Modules | => Core |
| 2024-02-15 13:34 | shuehner | Triggers an Emergency Pack | => No |
| 2024-02-15 13:35 | shuehner | Relationship added | related to 0053408 |
| 2024-02-15 13:35 | shuehner | Assigned To | Triage Platform Base => shuehner |
| 2024-02-15 13:41 | hgbot | Note Added: 0160791 | |
|
Issue History |
| Copyright © 2000 - 2009 MantisBT Group |
 |