[
https://issues.apache.org/jira/browse/OFBIZ-4130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12984713#action_12984713
]
Pierre Smits commented on OFBIZ-4130:
-------------------------------------
Currently the tenant tables (tables Tenant and TenantDataSource), not the
tables for the tenant, are accessed through delegator org.ofbiz.tenant.
One solution is, that like other database tables, these tables will be accessed
trhough the standard delegator org.ofbiz. The tenant admins (with FULLADMIN
rights in the tenant environment) then can no longer see the data in the tables
of the master databases.
However, they then can create new data entries in the tables in their own
tenant environment.
> Tenant super user (tenant admin) can view all database details of all tenants
> -----------------------------------------------------------------------------
>
> Key: OFBIZ-4130
> URL: https://issues.apache.org/jira/browse/OFBIZ-4130
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 10.04, SVN trunk
> Reporter: Pierre Smits
> Fix For: Release Branch 10.04, SVN trunk
>
>
> When a new tenant is created and the super user of the tenant (the
> tenant-admin) logs in to WebTools and views the tables Tenant and
> TenantDataSource he/she can see all details of the tenant databases, incl
> TenantName, userID and password of the tenant databases.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
