Project:
View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
ID | ||||||||
0056759 | ||||||||
Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||
defect | [Openbravo ERP] A. Platform | minor | have not tried | 2024-10-14 09:06 | 2024-11-10 22:51 | |||
Reporter | alostale | View Status | public | |||||
Assigned To | jarmendariz | |||||||
Priority | normal | Resolution | fixed | Fixed in Version | PR25Q1 | |||
Status | closed | Fix in branch | Fixed in SCM revision | |||||
Projection | none | ETA | none | Target Version | ||||
OS | Any | Database | Any | Java version | ||||
OS Version | Database version | Ant version | ||||||
Product Version | SCM revision | |||||||
Merge Request Status | approved | |||||||
Review Assigned To | ||||||||
OBNetwork customer | Gold | |||||||
Web browser | ||||||||
Modules | Core | |||||||
Support ticket | ||||||||
Regression level | ||||||||
Regression date | ||||||||
Regression introduced in release | ||||||||
Regression introduced by commit | ||||||||
Triggers an Emergency Pack | No | |||||||
Summary | 0056759: active sessions for locked users are usable till log out | |||||||
Description | After locking a user account, active sessions for that account can continue operating till they log out. | |||||||
Steps To Reproduce | 1. Session-1: Log in POS with demouser user 2. Session-2: Log in backoffice with Openbravo user 3. Session-2: In User window, look for demouser and flag the Locked field 4. Session-1: Complete a sale ERROR: it successfully completes it, it would be expectable the demouser sessions finalizes as the user is locked | |||||||
Proposed Solution | The easiest way to implement this is to set ad_session.session_active='N' where session_active='Y' and ad_user=:lockedUser. This causes the next time any backend action is performed, Tomcat session to be kicked out. Working also in a Tomcat cluster. | |||||||
Tags | No tags attached. | |||||||
Attached Files | ||||||||
![]() |
|
![]() |
|
(0171456) hgbot (developer) 2024-11-05 18:47 |
Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1426 [^] |
(0171730) hgbot (developer) 2024-11-10 22:51 |
Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1426 [^] |
(0171731) hgbot (developer) 2024-11-10 22:51 |
Directly closing issue as related merge request is already approved. Repository: https://gitlab.com/openbravo/product/openbravo [^] Changeset: 137385055c039244795b0a1b515af20c66ee7d95 Author: Augusto Mauch <amauch@orisha.com> Date: 10-11-2024 21:46:54 URL: https://gitlab.com/openbravo/product/openbravo/-/commit/137385055c039244795b0a1b515af20c66ee7d95 [^] Fixes ISSUE-56759: Automatically deactivate sessions of locked users --- A src/org/openbravo/authentication/DeactivateSessionOnUserLockEventHandler.java --- |
![]() |
|||
Date Modified | Username | Field | Change |
2024-10-14 09:06 | alostale | New Issue | |
2024-10-14 09:06 | alostale | Assigned To | => Triage Platform Base |
2024-10-14 09:06 | alostale | OBNetwork customer | => Gold |
2024-10-14 09:06 | alostale | Modules | => Core |
2024-10-14 09:06 | alostale | Triggers an Emergency Pack | => No |
2024-11-05 18:47 | hgbot | Merge Request Status | => open |
2024-11-05 18:47 | hgbot | Note Added: 0171456 | |
2024-11-05 18:51 | AugustoMauch | Assigned To | Triage Platform Base => jarmendariz |
2024-11-05 18:51 | AugustoMauch | Status | new => scheduled |
2024-11-10 22:47 | hgbot | Merge Request Status | open => approved |
2024-11-10 22:51 | hgbot | Resolution | open => fixed |
2024-11-10 22:51 | hgbot | Status | scheduled => closed |
2024-11-10 22:51 | hgbot | Note Added: 0171730 | |
2024-11-10 22:51 | hgbot | Fixed in Version | => PR25Q1 |
2024-11-10 22:51 | hgbot | Note Added: 0171731 |
Copyright © 2000 - 2009 MantisBT Group |