details: https://code.openbravo.com/erp/devel/pi/rev/6409589a6ef9
changeset: 15520:6409589a6ef9
user: Asier Lostalé <asier.lostale <at> openbravo.com>
date: Fri Feb 17 11:34:33 2012 +0100
summary: fixed bug 18987: Inconsistent security access for menus
diffstat:
src/org/openbravo/erpCommon/utility/WindowTree.java | 9 ++++++++-
1 files changed, 8 insertions(+), 1 deletions(-)
diffs (26 lines):
diff -r 74e62c9cbec5 -r 6409589a6ef9
src/org/openbravo/erpCommon/utility/WindowTree.java
--- a/src/org/openbravo/erpCommon/utility/WindowTree.java Fri Feb 17
11:10:34 2012 +0100
+++ b/src/org/openbravo/erpCommon/utility/WindowTree.java Fri Feb 17
11:34:33 2012 +0100
@@ -11,7 +11,7 @@
* under the License.
* The Original Code is Openbravo ERP.
* The Initial Developer of the Original Code is Openbravo SLU
- * All portions are Copyright (C) 2001-2010 Openbravo SLU
+ * All portions are Copyright (C) 2001-2012 Openbravo SLU
* All Rights Reserved.
* Contributor(s): ______________________________________.
************************************************************************
@@ -56,6 +56,13 @@
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws IOException,
ServletException {
VariablesSecureApp vars = new VariablesSecureApp(request);
+
+ // Checking the window invoking the tree is accessible
+ if (!hasGeneralAccess(vars, "W", vars.getStringParameter("inpTabId"))) {
+ bdErrorGeneralPopUp(request, response, Utility.messageBD(this, "Error",
vars.getLanguage()),
+ Utility.messageBD(this, "AccessTableNoView", vars.getLanguage()));
+ }
+
if (vars.commandIn("DEFAULT", "TAB")) {
String strTabId = vars.getGlobalVariable("inpTabId", "WindowTree|tabId");
String strTreeID = "";
------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Openbravo-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openbravo-commits
