Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0057513
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] A. Platformmajoralways2024-12-19 21:582025-01-20 00:01
ReporteregoitzView Statuspublic 
Assigned Toablasco 
PriorityurgentResolutionfixedFixed in Version
StatusclosedFix in branchFixed in SCM revisiondiffs?commit
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Statusapproved
Review Assigned To
OBNetwork customerGold
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0057513: The session is modified when using the POS and opening a new tab with the url with the backoffice URL even when not access

DescriptionWhen using a role defined as restrict backoffice access to yes,
if you are using the POS and you open a new tab with the backoffice URL, you get a message saying that you don't have access, but the ad_session row linked to the user/session you were using is changed from OB_POS to S (Sucess).
The loging_status should be keep as OB_POS becuas the access to BO is not allowed/done.

This is affecting the invoicing of our customers as we are invoicing them in SaaS based on the users doing a Successful login in the backoffice.
Steps To Reproduce- Define the vallblancauser role as "restrict backoffice access" to Y
- Access to the pos with the valblanca user and vallblancaruser role.
- See in another profile, in the session window as system admin, that there is a session with login_status OB-POS
- ON the previous profile where the pos login was done, open a new tab putting the URL of the backoffice
- You get a error message saying that you can access to the backoffice
- Check on the session that the Login_status has changed to Sucess
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]

-  Notes
(0174014)
hgbot (developer)
2025-01-10 14:21

 Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1498 [^]
(0174340)
hgbot (developer)
2025-01-19 23:58

 Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1498 [^]

- Issue History
Date Modified Username Field Change
2024-12-19 21:58 egoitz New Issue
2024-12-19 21:58 egoitz Assigned To => Triage Platform Base
2024-12-19 21:58 egoitz OBNetwork customer => Gold
2024-12-19 21:58 egoitz Modules => Core
2024-12-19 21:58 egoitz Triggers an Emergency Pack => No
2025-01-10 09:51 AugustoMauch Assigned To Triage Platform Base => ablasco
2025-01-10 11:38 ablasco Status new => acknowledged
2025-01-10 14:21 hgbot Merge Request Status => open
2025-01-10 14:21 hgbot Note Added: 0174014
2025-01-19 23:57 hgbot Merge Request Status open => approved
2025-01-19 23:58 hgbot Note Added: 0174340
2025-01-20 00:00 AugustoMauch Status acknowledged => scheduled
2025-01-20 00:01 AugustoMauch Status scheduled => resolved
2025-01-20 00:01 AugustoMauch Fixed in SCM revision => https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1498/diffs?commit_id=5e601bcab8e307325c7b64322273eb556ac35bce [^]
2025-01-20 00:01 AugustoMauch Resolution open => fixed
2025-01-20 00:01 AugustoMauch Status resolved => closed

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker