Openbravo Issue Tracking System - Retail Modules
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0038242Retail ModulesLoyalty Management for Retailpublic2018-03-28 11:222018-03-28 11:22
Reportermartinsdan 
Assigned ToRetail 
PrioritynormalSeverityminorReproducibilityalways
StatusnewResolutionopen 
PlatformOS30OS VersionOpenbravo Appliance 14.04
Product Version 
Target VersionFixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customerNo
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0038242: Loyalty is showing log warnings related to access
DescriptionThere are some errors related to security access in this module.

The reason for this is because those classes don't reimplement the method getFormId().

1ae2faae 2018-03-28 07:36:59,000 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.LoyaltyManagement
1ae2faae 2018-03-28 07:36:59,082 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.LoyaltyProgram
1ae2faae 2018-03-28 07:36:59,176 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.AccumulationRules
1ae2faae 2018-03-28 07:36:59,262 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.RedemptionRules
1ae2faae 2018-03-28 07:36:59,596 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.implementation.master.LoyaltyBusinessPartnerCard
Steps To ReproduceLogin to the POS and the warnings will be visible in the log.
Proposed SolutionChange those classes to extend org.openbravo.retail.posterminal.ProcessHQLQuery instead of org.openbravo.mobile.core.process.ProcessHQLQuery.

This way the access control will be done based on the POS Form.
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2018-03-28 11:22martinsdanNew Issue
2018-03-28 11:22martinsdanAssigned To => Retail
2018-03-28 11:22martinsdanOBNetwork customer => No
2018-03-28 11:22martinsdanTriggers an Emergency Pack => No

There are no notes attached to this issue.