Project:
| View Issue Details[ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||||||
| ID | ||||||||||||
| 0038242 | ||||||||||||
| Type | Category | Severity | Reproducibility | Date Submitted | Last Update | |||||||
| defect | [Retail Modules] Loyalty Management for Retail | minor | always | 2018-03-28 11:22 | 2018-03-28 11:22 | |||||||
| Reporter | martinsdan | View Status | public | |||||||||
| Assigned To | Retail | |||||||||||
| Priority | normal | Resolution | open | Fixed in Version | ||||||||
| Status | new | Fix in branch | Fixed in SCM revision | |||||||||
| Projection | none | ETA | none | Target Version | ||||||||
| OS | Linux 64 bit | Database | PostgreSQL | Java version | 7.x | |||||||
| OS Version | Openbravo Appliance 14.04 | Database version | 9.3.x | Ant version | 1.9.x | |||||||
| Product Version | SCM revision | |||||||||||
| Merge Request Status | ||||||||||||
| Review Assigned To | ||||||||||||
| OBNetwork customer | No | |||||||||||
| Support ticket | ||||||||||||
| Regression level | ||||||||||||
| Regression date | ||||||||||||
| Regression introduced in release | ||||||||||||
| Regression introduced by commit | ||||||||||||
| Triggers an Emergency Pack | No | |||||||||||
| Summary | 0038242: Loyalty is showing log warnings related to access | |||||||||||
| Description | There are some errors related to security access in this module. The reason for this is because those classes don't reimplement the method getFormId(). 1ae2faae 2018-03-28 07:36:59,000 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.LoyaltyManagement 1ae2faae 2018-03-28 07:36:59,082 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.LoyaltyProgram 1ae2faae 2018-03-28 07:36:59,176 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.AccumulationRules 1ae2faae 2018-03-28 07:36:59,262 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.master.RedemptionRules 1ae2faae 2018-03-28 07:36:59,596 [ajp-bio-127.0.0.1-8009-exec-10] WARN org.openbravo.mobile.core.process.SecuredJSONProcess - Not checking form access for class org.openbravo.retail.loyalty.implementation.master.LoyaltyBusinessPartnerCard | |||||||||||
| Steps To Reproduce | Login to the POS and the warnings will be visible in the log. | |||||||||||
| Proposed Solution | Change those classes to extend org.openbravo.retail.posterminal.ProcessHQLQuery instead of org.openbravo.mobile.core.process.ProcessHQLQuery. This way the access control will be done based on the POS Form. | |||||||||||
| Tags | No tags attached. | |||||||||||
| Attached Files | ||||||||||||
Relationships [ Relation Graph ]
[ Dependency Graph ]
|
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2018-03-28 11:22 | martinsdan | New Issue | |
| 2018-03-28 11:22 | martinsdan | Assigned To | => Retail |
| 2018-03-28 11:22 | martinsdan | OBNetwork customer | => No |
| 2018-03-28 11:22 | martinsdan | Triggers an Emergency Pack | => No |
| Copyright © 2000 - 2009 MantisBT Group |