[ 
https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13499115#comment-13499115
 ] 

Rene Frauli commented on OFBIZ-5072:
------------------------------------

I have tried to reproduce the issue with the current trunk with success.
So it's not only a problem of backporting to 12.04.

You can easily reproduce it with the following steps:

1. Load Demo
2. Load Demo Multitenant
3. Start
4. Login as tenant with admin / ofbiz / DEMO1
5. Go to Party and open details from admin
6. change password from user login admin to for e.g. test1
7. logout
8. try to login with admin / test1 / DEMO1

Now you will get an error, because the password is wrong.

When you try to login with admin / test1 without tenant it works.

So that means the password was not changed for the tenant admin, it was changed 
for the general admin.

Rene
 
                
> Tenant authentication problem
> -----------------------------
>
>                 Key: OFBIZ-5072
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-5072
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: Release Branch 12.04
>            Reporter: Rene Frauli
>            Assignee: Jacopo Cappellato
>             Fix For: SVN trunk, Release Branch 12.04
>
>         Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't 
> store the delegator, dispatcher, security and the authz in the session 
> only in the request.
> The effect is that the session for the tenant is not correct and the 
> tenant cannot be used at all with strange effects. For e.g. data are 
> stored with the default delegator.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to