Re: [ofbiz-framework] branch trunk updated: Improved: Converted all ShipmentReceiptRole service from crud to entity-auto (#85)

2020-04-30 Thread Suraj Khurana
Thanks Pawan.

It is done in rev a92136c662b2a150274b7a9aaea2c3117488e599

--
Best Regards,
Suraj Khurana
Senior Technical Consultant

On Thu, Apr 30, 2020 at 9:54 PM Pawan Verma 
wrote:

> Hi Suraj,
>
> You've missed to add default-entity-name for the entity-auto engine for the
> above services.
>
> Could you please handle?
> --
> Thanks & Regards
> Pawan Verma
> Technical Consultant
> *HotWax Systems*
> *Enterprise open source experts*
> http://www.hotwaxsystems.com
>
>
> On Thu, Apr 30, 2020 at 5:05 PM  wrote:
>
> > This is an automated email from the ASF dual-hosted git repository.
> >
> > surajk pushed a commit to branch trunk
> > in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
> >
> >
> > The following commit(s) were added to refs/heads/trunk by this push:
> >  new e1a16aa  Improved: Converted all ShipmentReceiptRole service
> from
> > crud to entity-auto (#85)
> > e1a16aa is described below
> >
> > commit e1a16aa9fe4bacded92a0c4c34a0af7c02d0a325
> > Author: Suraj Khurana <64310724+surajkhur...@users.noreply.github.com>
> > AuthorDate: Thu Apr 30 17:05:39 2020 +0530
> >
> > Improved: Converted all ShipmentReceiptRole service from crud to
> > entity-auto (#85)
> >
> > * Improved: Converted all ShipmentReceiptRole service from crud to
> > entity-auto
> > (OFBIZ-11614)
> > ---
> >  .../shipment/receipt/ShipmentReceiptServices.xml   | 15
> > ---
> >  applications/product/servicedef/services.xml   |  2 +-
> >  applications/product/servicedef/services_shipment.xml  | 18
> > ++
> >  3 files changed, 7 insertions(+), 28 deletions(-)
> >
> > diff --git
> >
> a/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> >
> b/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> > index 2dade39..4334dc5 100644
> > ---
> >
> a/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> > +++
> >
> b/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> > @@ -63,21 +63,6 @@ under the License.
> >   > result-name="affectAccounting"/>
> >  
> >
> > - > short-description="Create a ShipmentReceipt Role">
> > - > value-field="newEntity"/>
> > -
> > -
> > -
> > -
> > -
> > -
> > - > short-description="Remove a ShipmentReceipt Role">
> > - > value-field="lookupPKMap"/>
> > -
> > - > map="lookupPKMap" value-field="lookedUpValue"/>
> > -
> > -
> > -
> >   > short-description="Receive Inventory in new Inventory Item(s)">
> >  
> >
> >
>


Re: [ofbiz-framework] branch trunk updated: Improved: Converted all ShipmentReceiptRole service from crud to entity-auto (#85)

2020-04-30 Thread Pawan Verma
Hi Suraj,

You've missed to add default-entity-name for the entity-auto engine for the
above services.

Could you please handle?
-- 
Thanks & Regards
Pawan Verma
Technical Consultant
*HotWax Systems*
*Enterprise open source experts*
http://www.hotwaxsystems.com


On Thu, Apr 30, 2020 at 5:05 PM  wrote:

> This is an automated email from the ASF dual-hosted git repository.
>
> surajk pushed a commit to branch trunk
> in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
>
>
> The following commit(s) were added to refs/heads/trunk by this push:
>  new e1a16aa  Improved: Converted all ShipmentReceiptRole service from
> crud to entity-auto (#85)
> e1a16aa is described below
>
> commit e1a16aa9fe4bacded92a0c4c34a0af7c02d0a325
> Author: Suraj Khurana <64310724+surajkhur...@users.noreply.github.com>
> AuthorDate: Thu Apr 30 17:05:39 2020 +0530
>
> Improved: Converted all ShipmentReceiptRole service from crud to
> entity-auto (#85)
>
> * Improved: Converted all ShipmentReceiptRole service from crud to
> entity-auto
> (OFBIZ-11614)
> ---
>  .../shipment/receipt/ShipmentReceiptServices.xml   | 15
> ---
>  applications/product/servicedef/services.xml   |  2 +-
>  applications/product/servicedef/services_shipment.xml  | 18
> ++
>  3 files changed, 7 insertions(+), 28 deletions(-)
>
> diff --git
> a/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> b/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> index 2dade39..4334dc5 100644
> ---
> a/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> +++
> b/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> @@ -63,21 +63,6 @@ under the License.
>   result-name="affectAccounting"/>
>  
>
> - short-description="Create a ShipmentReceipt Role">
> - value-field="newEntity"/>
> -
> -
> -
> -
> -
> -
> - short-description="Remove a ShipmentReceipt Role">
> - value-field="lookupPKMap"/>
> -
> - map="lookupPKMap" value-field="lookedUpValue"/>
> -
> -
> -
>   short-description="Receive Inventory in new Inventory Item(s)">
>  
>
>


Re: encrypted columns

2020-04-30 Thread Ankush Upadhyay
Hello Welner,

I believe you should ask these types of questions on the user mailing list (
u...@ofbiz.apache.org) please do subscribe if you are not on it. User
mailing list is the best place for such a question and you will get better
support on user mailing list.

Regarding your question, please check
https://cwiki.apache.org/confluence/display/OFBIZ/Multitenancy+support it
should help you to understand how it works.
There was another great discussion thread with subject *multi tenant setup
help* on user mailing list.




Kind Regards,
Ankush Upadhyay
Senior Technical Consultant

*HotWax Systems*
*Enterprise open source experts*
cell: +91-8109201285
office: 0731-409-3684
http://www.hotwaxsystems.com


On Thu, Apr 30, 2020 at 5:39 PM Werner Brasch  wrote:

> Hallo
> I have set the column jdbcPassword In the entity TenantDataSource to
> encrypt="true" and it seems to work. It is possible to work on the new
> tenant.
> But I don't know how the Security works, is the jdbcPassword now save, how
> does it works?
>
> Best regards
>
> Viele Grüße aus Bremen
>
> Werner Brasch
>
>


RE: Welcome Rishi Solanki as new PMC member

2020-04-30 Thread Swapnil Shah
Congratulations Rishi !!

Thanks,
Swapnil

> -Original Message-
> From: Jacopo Cappellato 
> Sent: 28 April 2020 19:53
> To: Dev list 
> Subject: Welcome Rishi Solanki as new PMC member
>
> The OFBiz PMC has invited Rishi Solanki to become member of the committee
> and we are glad to announce that he has accepted the nomination.
>
> On behalf of the OFBiz PMC, welcome on board!


Re: Welcome Swapnil M Mane as new PMC member

2020-04-30 Thread Swapnil M Mane
Dear all,
Thank you so much for your kind wishes!
It's a privilege and honor to be part of the vibrant OFBiz community.
Looking forward to having more amazing experience with you all, thanks
again.

Thank you Jacques for your mail.

- Best regards,
Swapnil M Mane,
ofbiz.apache.org



On Tue, Apr 28, 2020 at 8:46 PM Deepak Nigam 
wrote:

> Congratulations, Swapnil.
>
> Regards
> --
> Deepak Nigam
>
> On Mon, Apr 27, 2020, 11:02 AM Aditya Sharma 
> wrote:
>
> > Congratulations Swapnil!
> >
> > Thanks and Regards,
> > Aditya Sharma
> >
> > On Sat, Apr 25, 2020 at 9:58 PM Mohammad Kathawala <
> > mohammad.kathaw...@hotwaxsystems.com> wrote:
> >
> > > Many Congratulations Swapnil!
> > > Kind Regards,
> > > Mohammad Kathawala
> > > Senior Technical Consultant
> > > *HotWax Systems*
> > > *Enterprise open source experts*
> > > cell: +91-7772858789
> > > office: 0731-409-3684
> > > http://www.hotwaxsystems.com
> > >
> > >
> > > On Sat, Apr 25, 2020 at 7:19 PM Pranay Pandey <
> > > pranay.pan...@hotwaxsystems.com> wrote:
> > >
> > > > Swapnil M,
> > > >
> > > > Congratulations and welcome.
> > > > Looking forward to a wonderful journey together.
> > > >
> > > > Best regards,
> > > > Pranay Pandey
> > > >
> > > >
> > > > On Thu, Apr 23, 2020 at 5:02 PM Jacques Le Roux <
> > > > jacques.le.r...@les7arts.com> wrote:
> > > >
> > > > > The OFBiz PMC has invited Swapnil M Mane to become member of the
> > > > committee
> > > > > and we are glad to announce that he has accepted the nomination.
> > > > >
> > > > > On behalf of the OFBiz PMC, welcome on board!
> > > > >
> > > > >
> > > >
> > >
> >
>


[CVE-2019-0235 ] Apache OFBiz multiple CSRF vulnerabilities

2020-04-30 Thread jler...@apache.org

Severity:
Important

Vendor:
The Apache Software Foundation

Versions Affected:
OFBiz 17.12.01

Description:
Apache OFBiz is vulnerable to CSRF attacks

Mitigation:
Upgrade to 17.12.03 or manually apply the commits at OFBIZ-11470


Credit:
Initially known by the OFBiz security team (OFBIZ-10427),
also reported later by
Man Yue Mo via RT 
Shuibo Ye 
Vikash Patnaik 
Sonali Agrahari 
Girish Vasmatkar 
Dinesh Kumar Mohanty 
Jason Nordenstam 
Pradeep Jairamani 
Faiz Zaidi 

References:
https://ofbiz.apache.org/security.html



[CVE-2019-12425] Apache OFBiz Host Header Injection

2020-04-30 Thread Jacques Le Roux

Severity:
Important

Vendor:
The Apache Software Foundation

Versions Affected:
OFBiz 17.12.01

Description:
Apache OFBiz is vulnerable to Host header injection by accepting arbitrary hosts

Mitigation:
Upgrade to 17.12.03 or manually apply the commit at OFBIZ-11583


Credit:
Pradeep Jairamani 

References:
https://ofbiz.apache.org/security.html



encrypted columns

2020-04-30 Thread Werner Brasch
Hallo
I have set the column jdbcPassword In the entity TenantDataSource to 
encrypt="true" and it seems to work. It is possible to work on the new tenant.
But I don't know how the Security works, is the jdbcPassword now save, how does 
it works?

Best regards

Viele Grüße aus Bremen

Werner Brasch



Re: Update improvements OFBiz/BI Component - Q Session

2020-04-30 Thread Pierre Smits
Hi All,

Just a friendly reminder that today I will be hosting a Demo/Q session
to give an explanation about the changes to the BI Component under ticket
OFBIZ-11414
<https://www.google.com/url?q=https://issues.apache.org/jira/browse/OFBIZ-11414=D=158814619889=AOvVaw2Jh3jKlmOHyjyrpaBsOL17>
in
JIRA and committed in  PR #11
<https://www.google.com/url?q=https://github.com/apache/ofbiz-plugins/pull/11=D=158814619889=AOvVaw25pcMSL2jYs3GF08vNGK1Z>
in
Github.

This session will be held on:

   - Date: April 30th, 14:00 UTC
   - Join Hangout/Meet: https://meet.google.com/bje-kznw-zyu
   
<https://www.google.com/url?q=https://meet.google.com/bje-kznw-zyu=D=158814619889=AOvVaw2nxWYDhN2RQ0O3lSwcofGh>
   - Join By Phone: ‪+31 20 257 4820‬ PIN: ‪919 688 249‬#

I am looking forward to meeting you there.

Met vriendelijke groet,

Pierre Smits
*Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
2008 (without privileges)

*Apache Trafodion <https://trafodion.apache.org>, Vice President*
*Apache Directory <https://directory.apache.org>, PMC Member*
Apache Incubator <https://incubator.apache.org>, committer
Apache Steve <https://steve.apache.org>, committer


On Fri, Apr 24, 2020 at 9:57 AM Pierre Smits  wrote:

> To see the date/time of the session in your own timezone, have a look at:
> https://www.timeanddate.com/worldclock/meetingtime.html?iso=20200430=16=44=179
>
> Met vriendelijke groet,
>
> Pierre Smits
> *Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
> 2008 (without privileges)
>
> *Apache Trafodion <https://trafodion.apache.org>, Vice President*
> *Apache Directory <https://directory.apache.org>, PMC Member*
> Apache Incubator <https://incubator.apache.org>, committer
> Apache Steve <https://steve.apache.org>, committer
>
>
> On Fri, Apr 24, 2020 at 9:46 AM Pierre Smits 
> wrote:
>
>> Hi All,
>>
>>
>> Over the past month(s) I have worked to improve the BI Component to move
>> it from a state of Proof of Concept to a state of being actually useful for
>> our adopters. The changes implemented make it so that it is new good enough
>> to be incorporated into the code base.
>>
>> I can imagine that the volume of subtasks created/addressed under
>> OFBIZ-11414
>> <https://www.google.com/url?q=https://issues.apache.org/jira/browse/OFBIZ-11414=D=158814619889=AOvVaw2Jh3jKlmOHyjyrpaBsOL17>
>>  in
>> JIRA and committed in  PR #11
>> <https://www.google.com/url?q=https://github.com/apache/ofbiz-plugins/pull/11=D=158814619889=AOvVaw25pcMSL2jYs3GF08vNGK1Z>
>>  in
>> Github makes it a bit hard to assess where we stand now regarding the
>> component.
>>
>> Therefore I will be holding a live Q session (in Google Hangout/Meet)
>> to give an explanation and answer any question that may pop up, along
>> following subjects (amongst others, subject to change):
>>
>>1. Purpose of the Component
>>2. Current State, see https://demo-trunk.ofbiz.apache.org/bi
>>
>> <https://www.google.com/url?q=https://demo-trunk.ofbiz.apache.org/bi=D=158814619889=AOvVaw2nktXRDKMWTe3mp_cpTakP>
>>3. Introduced Changes via ticket OFBIZ-11414
>>
>> <https://www.google.com/url?q=https://issues.apache.org/jira/browse/OFBIZ-11414=D=158814619889=AOvVaw2Jh3jKlmOHyjyrpaBsOL17>
>>  in
>>JIRA and PR #11
>>
>> <https://www.google.com/url?q=https://github.com/apache/ofbiz-plugins/pull/11=D=158814619889=AOvVaw25pcMSL2jYs3GF08vNGK1Z>
>>  in
>>Github
>>
>>
>> This Q session will be held on:
>>
>>- Date: April 30th, 14:00 UTC
>>- Join Hangout/Meet: https://meet.google.com/bje-kznw-zyu
>>
>> <https://www.google.com/url?q=https://meet.google.com/bje-kznw-zyu=D=158814619889=AOvVaw2nxWYDhN2RQ0O3lSwcofGh>
>>- Join By Phone: ‪+31 20 257 4820‬ PIN: ‪919 688 249‬#
>>
>>
>>
>>
>> I am looking forward to meeting you there
>>
>>
>> Met vriendelijke groet,
>>
>> Pierre Smits
>> *Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
>> 2008 (without privileges)
>>
>> *Apache Trafodion <https://trafodion.apache.org>, Vice President*
>> *Apache Directory <https://directory.apache.org>, PMC Member*
>> Apache Incubator <https://incubator.apache.org>, committer
>> Apache Steve <https://steve.apache.org>, committer
>>
>