Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0054972
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] 01. General setupmajoralways2024-03-15 14:312024-04-12 11:55
ReporterngarciaView Statuspublic 
Assigned ToAugustoMauch 
PriorityurgentResolutionfixedFixed in VersionPR24Q3
StatusclosedFix in branchFixed in SCM revisiondiffs?commit
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Review Assigned To
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0054972: A record in a non editable tab can be deleted by a role if it includes an editable field

DescriptionA record in a non editable tab can be deleted by a role if it includes an editable field
Steps To ReproduceIn any Openbravo environment (only backoffice needed)

Go to Role window and set the User window as editable (Editable = 'Y' in Window access tab) to the current logged in role and the "User - User" tab as non editable (Editable = 'N' in Tab Access subtab)

Log out and log in

Go to User window, check that a record cannot be created. Check as well that existing records cannot be removed, and that none of the fields are editable.

Go back to Role window and add "Username - User - User" field as editable (Editable = 'Y' in Field access subtab)

Log out and log in

Open again the User window and notice that the New Record button is enabled (this is OK as only the username field can be edited), but the Delete current record button is enabled as well, and it should not be
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]

-  Notes
(0162923)
hgbot (developer)
2024-04-08 15:30

Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1186 [^]
(0163148)
hgbot (developer)
2024-04-12 11:55

Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1186 [^]
(0163149)
hgbot (developer)
2024-04-12 11:55

Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/openbravo [^]
Changeset: 5b1b3ca32f8b418d226c7626679e7ae270028b3b
Author: Augusto Mauch <augusto.mauch@openbravo.com>
Date: 12-04-2024 09:53:16
URL: https://gitlab.com/openbravo/product/openbravo/-/commit/5b1b3ca32f8b418d226c7626679e7ae270028b3b [^]

Fixes ISSUE-54972: Non-editable tabs should not allow record deletion

Tabs configured to be non-editable should not allow to delete records, even if some of its specific fields can be edited. If some
fields can be edited then it will be possible to edit those rows in existing records, or to create new records if all mandatory
fields are editable

---
M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/main/ob-standard-view.js
M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/main/ob-standard-window.js
M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/toolbar/ob-toolbar.js
---

- Issue History
Date Modified Username Field Change
2024-03-15 14:31 ngarcia New Issue
2024-03-15 14:31 ngarcia Assigned To => Triage Omni OMS
2024-03-15 14:31 ngarcia Modules => Core
2024-03-15 14:31 ngarcia Triggers an Emergency Pack => No
2024-03-15 14:39 aferraz Assigned To Triage Omni OMS => Triage Platform Base
2024-04-08 12:17 AugustoMauch Steps to Reproduce Updated View Revisions
2024-04-08 12:17 AugustoMauch Steps to Reproduce Updated View Revisions
2024-04-08 12:24 AugustoMauch Steps to Reproduce Updated View Revisions
2024-04-08 12:24 AugustoMauch Assigned To Triage Platform Base => AugustoMauch
2024-04-08 12:24 AugustoMauch Status new => scheduled
2024-04-08 15:30 hgbot Note Added: 0162923
2024-04-08 15:31 AugustoMauch Status scheduled => resolved
2024-04-08 15:31 AugustoMauch Fixed in SCM revision => https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1186/diffs?commit_id=3d8784a0767e809fbcdea9dfc89e19bb63e2ca73 [^]
2024-04-08 15:31 AugustoMauch Resolution open => fixed
2024-04-12 11:55 hgbot Status resolved => closed
2024-04-12 11:55 hgbot Fixed in Version => PR24Q3
2024-04-12 11:55 hgbot Note Added: 0163148
2024-04-12 11:55 hgbot Note Added: 0163149


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker