Project:
| View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
| ID | ||||||||
| 0056759 | ||||||||
| Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
| defect | [Openbravo ERP] A. Platform | minor | have not tried | 2024-10-14 09:06 | 2024-11-10 22:51 | |||
| Reporter | alostale | View Status | public | |||||
| Assigned To | jarmendariz | |||||||
| Priority | normal | Resolution | fixed | Fixed in Version | PR25Q1 | |||
| Status | closed | Fix in branch | Fixed in SCM revision | |||||
| Projection | none | ETA | none | Target Version | ||||
| OS | Any | Database | Any | Java version | ||||
| OS Version | Database version | Ant version | ||||||
| Product Version | SCM revision | |||||||
| Merge Request Status | approved | |||||||
| Review Assigned To | ||||||||
| OBNetwork customer | Gold | |||||||
| Web browser | ||||||||
| Modules | Core | |||||||
| Support ticket | ||||||||
| Regression level | ||||||||
| Regression date | ||||||||
| Regression introduced in release | ||||||||
| Regression introduced by commit | ||||||||
| Triggers an Emergency Pack | No | |||||||
| Summary | 0056759: active sessions for locked users are usable till log out | |||||||
| Description | After locking a user account, active sessions for that account can continue operating till they log out. | |||||||
| Steps To Reproduce | 1. Session-1: Log in POS with demouser user 2. Session-2: Log in backoffice with Openbravo user 3. Session-2: In User window, look for demouser and flag the Locked field 4. Session-1: Complete a sale ERROR: it successfully completes it, it would be expectable the demouser sessions finalizes as the user is locked | |||||||
| Proposed Solution | The easiest way to implement this is to set ad_session.session_active='N' where session_active='Y' and ad_user=:lockedUser. This causes the next time any backend action is performed, Tomcat session to be kicked out. Working also in a Tomcat cluster. | |||||||
| Tags | No tags attached. | |||||||
| Attached Files | ||||||||
Relationships [ Relation Graph ]
[ Dependency Graph ]
|
|
Notes |
|
|
(0171456) hgbot (developer) 2024-11-05 18:47 |
Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1426 [^] |
|
(0171730) hgbot (developer) 2024-11-10 22:51 |
Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1426 [^] |
|
(0171731) hgbot (developer) 2024-11-10 22:51 |
Directly closing issue as related merge request is already approved. Repository: https://gitlab.com/openbravo/product/openbravo [^] Changeset: 137385055c039244795b0a1b515af20c66ee7d95 Author: Augusto Mauch <amauch@orisha.com> Date: 10-11-2024 21:46:54 URL: https://gitlab.com/openbravo/product/openbravo/-/commit/137385055c039244795b0a1b515af20c66ee7d95 [^] Fixes ISSUE-56759: Automatically deactivate sessions of locked users --- A src/org/openbravo/authentication/DeactivateSessionOnUserLockEventHandler.java --- |
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2024-10-14 09:06 | alostale | New Issue | |
| 2024-10-14 09:06 | alostale | Assigned To | => Triage Platform Base |
| 2024-10-14 09:06 | alostale | OBNetwork customer | => Gold |
| 2024-10-14 09:06 | alostale | Modules | => Core |
| 2024-10-14 09:06 | alostale | Triggers an Emergency Pack | => No |
| 2024-11-05 18:47 | hgbot | Merge Request Status | => open |
| 2024-11-05 18:47 | hgbot | Note Added: 0171456 | |
| 2024-11-05 18:51 | AugustoMauch | Assigned To | Triage Platform Base => jarmendariz |
| 2024-11-05 18:51 | AugustoMauch | Status | new => scheduled |
| 2024-11-10 22:47 | hgbot | Merge Request Status | open => approved |
| 2024-11-10 22:51 | hgbot | Resolution | open => fixed |
| 2024-11-10 22:51 | hgbot | Status | scheduled => closed |
| 2024-11-10 22:51 | hgbot | Note Added: 0171730 | |
| 2024-11-10 22:51 | hgbot | Fixed in Version | => PR25Q1 |
| 2024-11-10 22:51 | hgbot | Note Added: 0171731 | |
| Copyright © 2000 - 2009 MantisBT Group |