[jira] [Assigned] (OFBIZ-11035) Add timezone support to recurring job temporal expressions

2019-05-16 Thread Pawan Verma (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11035?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pawan Verma reassigned OFBIZ-11035:
---

Assignee: Pawan Verma

> Add timezone support to recurring job temporal expressions
> --
>
> Key: OFBIZ-11035
> URL: https://issues.apache.org/jira/browse/OFBIZ-11035
> Project: OFBiz
>  Issue Type: Improvement
>  Components: framework/webtools
>Affects Versions: Trunk
>Reporter: Pawan Verma
>Assignee: Pawan Verma
>Priority: Major
>
> Link of the discussion: [https://markmail.org/message/jsjqmjypaihbbldn]
> *As per Scott:*
> Trying to decide on the best way to define a *temporal* *expression* for a 
> recurring job where the *temporal* *expression* should be evaluated using a 
> *timezone* other than whatever the default *timezone* is for the system.
> The use case is having a system that runs on UTC time but needs to send a 
> report at 5 pm Pacific Time every day regardless of whether or not daylight 
> savings is in effect.
> Two options:
>  # Add a field to *JobSandbox* such as recurrenceTimeZone (or better name!)
>  # Use whatever *timezone* is available in the RunTime data service context
> Based on the discussion on Dev Mailing list #1 will be used to implement this 
> feature.
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10992) No pre-filled value while selecting "facilityId To" on Transfer Inventory Item screen

2019-05-16 Thread Swapnil M Mane (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10992?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Swapnil M Mane updated OFBIZ-10992:
---
Sprint: Community Day (May 2019)

> No pre-filled value while selecting "facilityId To" on Transfer Inventory 
> Item screen
> -
>
> Key: OFBIZ-10992
> URL: https://issues.apache.org/jira/browse/OFBIZ-10992
> Project: OFBiz
>  Issue Type: Bug
>  Components: product
>Affects Versions: Trunk
>Reporter: Aishwary Shrivastava
>Assignee: Swapnil M Mane
>Priority: Minor
> Attachments: NewFacility.png, OFBIZ-10992.patch, 
> TransferInventoryItem.png
>
>
> While creating Transfer Inventory Item from warehouse, there are no prefiled 
> values in selecting FacilityId To.
> Steps to regenerate:
>  # Go to Facilities.
>  # Select Inventory Xfers.
>  # Create Transfer Inventory Item From any Warehouse.
>  # Fill values in the feilds.
>  # Try to click on FacilityIdTo field
> Attached the screenshots for creating new inventory item transfer screen and 
> new facility screen.
>  
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-10187) OWASP sanitizer breaks proper rendering of HTML code

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10187?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841700#comment-16841700
 ] 

Jacques Le Roux commented on OFBIZ-10187:
-

Hi Dennis,

It's from 2011:
https://github.com/OWASP/java-html-sanitizer/blame/master/src/main/java/org/owasp/html/examples/EbayPolicyExample.java
Not sure why you missed it.

> OWASP sanitizer breaks proper rendering of HTML code
> 
>
> Key: OFBIZ-10187
> URL: https://issues.apache.org/jira/browse/OFBIZ-10187
> Project: OFBiz
>  Issue Type: Bug
>  Components: ALL COMPONENTS
>Affects Versions: Trunk, 16.11.04, Release Branch 17.12, Release Branch 
> 18.12
>Reporter: Michael Brohl
>Assignee: Michael Brohl
>Priority: Critical
>  Labels: backport-needed
> Fix For: 17.12.01, 16.11.06, 18.12.01
>
> Attachments: 
> OFBIZ-10187_Rewrite-CustomPermissivePolicy-matchesEithe.patch, 
> OFBIZ-10187_Sanitizer.patch, OFBIZ-10187_Sanitizer_16.11.patch, 
> OFBIZ-10187_Sanitizer_New.patch
>
>
> The current implementation of the sanitizer breaks the proper rendering of 
> html code. In our case, class attributes are stripped from the html content.
> Example:
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> will be rendered to
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> I do not see any reason to not allow class attributes in html code. There 
> might be other problems with these rules but this is a showstopper.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10996) Have a Supplier dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10996?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10996:
-
Attachment: OFBIZ-10996-SupplierDimension.patch

> Have a Supplier dimension
> -
>
> Key: OFBIZ-10996
> URL: https://issues.apache.org/jira/browse/OFBIZ-10996
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: SupplierDimension, birt, dimension, dww, supplier
> Attachments: OFBIZ-10996-SupplierDimension.patch
>
>
> The component would benefit from a Supplier dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10997) Have an Employee dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10997?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10997:
-
Attachment: OFBIZ-10997-EmployeeDimension.patch

> Have an Employee dimension
> --
>
> Key: OFBIZ-10997
> URL: https://issues.apache.org/jira/browse/OFBIZ-10997
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: EmployeeDimension, birt, dimension, dwh, employee
> Attachments: OFBIZ-10997-EmployeeDimension.patch
>
>
> The component would benefit from an employee dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11034) Have a Carrier dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11034?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-11034:
-
Attachment: OFBIZ-11034-CarrierDimension.patch

> Have a Carrier dimension
> 
>
> Key: OFBIZ-11034
> URL: https://issues.apache.org/jira/browse/OFBIZ-11034
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: CarrierDimension, birt, carrier, dimension, dwh
> Attachments: OFBIZ-11034-CarrierDimension.patch
>
>
> The component would benefit from a Carrier dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-11026) HR Doc drive by process

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-11026?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841441#comment-16841441
 ] 

Jacques Le Roux commented on OFBIZ-11026:
-

Thanks Olivier, it's clear to me

> HR Doc drive by process
> ---
>
> Key: OFBIZ-11026
> URL: https://issues.apache.org/jira/browse/OFBIZ-11026
> Project: OFBiz
>  Issue Type: Sub-task
>  Components: humanres
>Affects Versions: Trunk
>Reporter: Olivier Heintz
>Priority: Major
>  Labels: Documentation, humanres
> Attachments: OFBIZ-11026_hr-intro.adoc.patch, 
> OFBIZ-11026_humanres.adoc.patch, 
> OFBIZ-11026_humanres.adoc_with_hr-about-doc.patch
>
>
> Currently HR doc main chapters are on core HR object, I propose to group them 
> in a chapter and having a chapter by process in the same level bot group in 
> the HR Process.
> Each process is described via a scenario explained like a tutorial, and each 
> time a core object is used, a link is done to its chapter.
> To help review : doc with these modifications are available at 
> [https://ofbizadoc.ofbizextra.org/html5/user-manual.html#_human_resources]
> and Apache OFBiz standard (without modifications) is available too at 
> https://ofbizadoc.ofbizextra.org/html5/user-manual-std.html#_human_resources
> current HR TOC
>  --
>  3.2. Human Resources
>      3.2.1. About Human Resources
>      3.2.2. Human Resources Processes
>      3.2.3. Employee Positions
>      3.2.4. Employees
>      3.2.5. Employments
>      3.2.6. Performance Review
>      3.2.7. Qualifications
>      3.2.8. Recruitment
>      3.2.9. Skills
>      3.2.10. Resumes
>      3.2.11. Training
>      3.2.12. Leave
>      3.2.13. Security
>      3.2.14. Global HR Settings
>      3.2.15. Glossary
>  Proposed HR TOC
>  
>  4. Human Resources
>      4.1. About this documentation
>      4.2. About Human Resources
>      4.3. HR Processes
>      4.3.1. Organization, Job Position and Definition
>      4.3.2. Recruitment, Candidate Selection and Hiring
>      4.3.3. Employee Training and Development
>      4.3.4. Performance Management and Employee Evaluation
>      4.3.5. Employee Salary and Benefits Administration
>      4.4. HR core object
>      4.4.1. Employee Positions
>      4.4.2. Employees
>      4.4.3. Employments
>      4.4.4. Performance Review
>      4.4.5. Qualifications
>      4.4.6. Recruitment
>      4.4.7. Skills
>      4.4.8. Resumes
>      4.4.9. Training
>      4.4.10. Leave
>      4.4.11. Security
>      4.5. Global HR Settings
>      4.5.1. Skills Types
>      4.6. HR Data model
>      4.6.1. Employee Position
>      4.6.2. Employment
>      4.6.3. Qualification, Skill, Review
>      4.6.4. HR App intra-application integration
>      4.7. Glossary



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11026) HR Doc drive by process

2019-05-16 Thread Olivier Heintz (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11026?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Olivier Heintz updated OFBIZ-11026:
---
Attachment: OFBIZ-11026_humanres.adoc_with_hr-about-doc.patch

> HR Doc drive by process
> ---
>
> Key: OFBIZ-11026
> URL: https://issues.apache.org/jira/browse/OFBIZ-11026
> Project: OFBiz
>  Issue Type: Sub-task
>  Components: humanres
>Affects Versions: Trunk
>Reporter: Olivier Heintz
>Priority: Major
>  Labels: Documentation, humanres
> Attachments: OFBIZ-11026_hr-intro.adoc.patch, 
> OFBIZ-11026_humanres.adoc.patch, 
> OFBIZ-11026_humanres.adoc_with_hr-about-doc.patch
>
>
> Currently HR doc main chapters are on core HR object, I propose to group them 
> in a chapter and having a chapter by process in the same level bot group in 
> the HR Process.
> Each process is described via a scenario explained like a tutorial, and each 
> time a core object is used, a link is done to its chapter.
> To help review : doc with these modifications are available at 
> [https://ofbizadoc.ofbizextra.org/html5/user-manual.html#_human_resources]
> and Apache OFBiz standard (without modifications) is available too at 
> https://ofbizadoc.ofbizextra.org/html5/user-manual-std.html#_human_resources
> current HR TOC
>  --
>  3.2. Human Resources
>      3.2.1. About Human Resources
>      3.2.2. Human Resources Processes
>      3.2.3. Employee Positions
>      3.2.4. Employees
>      3.2.5. Employments
>      3.2.6. Performance Review
>      3.2.7. Qualifications
>      3.2.8. Recruitment
>      3.2.9. Skills
>      3.2.10. Resumes
>      3.2.11. Training
>      3.2.12. Leave
>      3.2.13. Security
>      3.2.14. Global HR Settings
>      3.2.15. Glossary
>  Proposed HR TOC
>  
>  4. Human Resources
>      4.1. About this documentation
>      4.2. About Human Resources
>      4.3. HR Processes
>      4.3.1. Organization, Job Position and Definition
>      4.3.2. Recruitment, Candidate Selection and Hiring
>      4.3.3. Employee Training and Development
>      4.3.4. Performance Management and Employee Evaluation
>      4.3.5. Employee Salary and Benefits Administration
>      4.4. HR core object
>      4.4.1. Employee Positions
>      4.4.2. Employees
>      4.4.3. Employments
>      4.4.4. Performance Review
>      4.4.5. Qualifications
>      4.4.6. Recruitment
>      4.4.7. Skills
>      4.4.8. Resumes
>      4.4.9. Training
>      4.4.10. Leave
>      4.4.11. Security
>      4.5. Global HR Settings
>      4.5.1. Skills Types
>      4.6. HR Data model
>      4.6.1. Employee Position
>      4.6.2. Employment
>      4.6.3. Qualification, Skill, Review
>      4.6.4. HR App intra-application integration
>      4.7. Glossary



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11039) add a chapter "About this documentation"

2019-05-16 Thread Olivier Heintz (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11039?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Olivier Heintz updated OFBIZ-11039:
---
Attachment: Employee_Main_Screen.png
HR-Employee_Submenu_Rainbow_Stone.png
HR-Employee_Submenu_Tomahawk.png
HR_Application_Submenu_Rainbow_Stone.png
HR_Application_Submenu_Tomahawk.png

> add a chapter "About this documentation"
> 
>
> Key: OFBIZ-11039
> URL: https://issues.apache.org/jira/browse/OFBIZ-11039
> Project: OFBiz
>  Issue Type: Sub-task
>  Components: humanres
>Affects Versions: Trunk
>Reporter: Olivier Heintz
>Priority: Major
> Fix For: Trunk
>
> Attachments: Employee_Main_Screen.png, 
> HR-Employee_Submenu_Rainbow_Stone.png, HR-Employee_Submenu_Tomahawk.png, 
> HR_Application_Submenu_Rainbow_Stone.png, 
> HR_Application_Submenu_Tomahawk.png, hr-about-doc.adoc
>
>
> This chapter present the main OFBiz GUI rules with some screenshot and link 
> between tutorial and video of "Scenario GUI Test"
> Currently it's in HR, but when other application will be done it can be 
> generalize and go to User Manual introduction.
> The file hr-about-doc.adoc associated with this task is included via a 
> include:: line in the humanres.adoc



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11039) add a chapter "About this documentation"

2019-05-16 Thread Olivier Heintz (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11039?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Olivier Heintz updated OFBIZ-11039:
---
Attachment: hr-about-doc.adoc

> add a chapter "About this documentation"
> 
>
> Key: OFBIZ-11039
> URL: https://issues.apache.org/jira/browse/OFBIZ-11039
> Project: OFBiz
>  Issue Type: Sub-task
>  Components: humanres
>Affects Versions: Trunk
>Reporter: Olivier Heintz
>Priority: Major
> Fix For: Trunk
>
> Attachments: hr-about-doc.adoc
>
>
> This chapter present the main OFBiz GUI rules with some screenshot and link 
> between tutorial and video of "Scenario GUI Test"
> Currently it's in HR, but when other application will be done it can be 
> generalize and go to User Manual introduction.
> The file hr-about-doc.adoc associated with this task is included via a 
> include:: line in the humanres.adoc



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Created] (OFBIZ-11039) add a chapter "About this documentation"

2019-05-16 Thread Olivier Heintz (JIRA)
Olivier Heintz created OFBIZ-11039:
--

 Summary: add a chapter "About this documentation"
 Key: OFBIZ-11039
 URL: https://issues.apache.org/jira/browse/OFBIZ-11039
 Project: OFBiz
  Issue Type: Sub-task
  Components: humanres
Affects Versions: Trunk
Reporter: Olivier Heintz
 Fix For: Trunk


This chapter present the main OFBiz GUI rules with some screenshot and link 
between tutorial and video of "Scenario GUI Test"

Currently it's in HR, but when other application will be done it can be 
generalize and go to User Manual introduction.

The file hr-about-doc.adoc associated with this task is included via a 
include:: line in the humanres.adoc



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11037) Improve PartyAcctgPrefAndGroup to reflect all fields from the PartyAcctgPreference entity

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11037?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-11037:
-
Attachment: OFBIZ-11037-Party.patch.diff

> Improve PartyAcctgPrefAndGroup to reflect all fields from the 
> PartyAcctgPreference entity
> -
>
> Key: OFBIZ-11037
> URL: https://issues.apache.org/jira/browse/OFBIZ-11037
> Project: OFBiz
>  Issue Type: Improvement
>  Components: party
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: internalOrganisation, view
> Attachments: OFBIZ-11037-Party.patch.diff
>
>




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11038) Unable to view a PartyContent on view profile page of a party

2019-05-16 Thread Devanshu Vyas (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11038?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Devanshu Vyas updated OFBIZ-11038:
--
Attachment: Error_message.png
PartyContent_View.png

> Unable to view a PartyContent on view profile page of a party
> -
>
> Key: OFBIZ-11038
> URL: https://issues.apache.org/jira/browse/OFBIZ-11038
> Project: OFBiz
>  Issue Type: Bug
>  Components: party
>Reporter: Devanshu Vyas
>Priority: Minor
> Attachments: Error_message.png, PartyContent_View.png
>
>
> * Go to [partymgr|https://demo-trunk.ofbiz.apache.org/partymgr/control/main]
> * Search any party(e.g. DemoCustomer)
> * Go to the [party 
> profile|https://demo-trunk.ofbiz.apache.org/partymgr/control/viewprofile?partyId=DemoCustomer]
>  page
> * Go to Party Content section on the page and upload a file
> * Select a purpose(Logo Image Url) and click on the Upload button
> * On page refresh, click on the view button to view the image uploaded. 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Created] (OFBIZ-11037) Improve PartyAcctgPrefAndGroup to reflect all fields from the PartyAcctgPreference entity

2019-05-16 Thread Pierre Smits (JIRA)
Pierre Smits created OFBIZ-11037:


 Summary: Improve PartyAcctgPrefAndGroup to reflect all fields from 
the PartyAcctgPreference entity
 Key: OFBIZ-11037
 URL: https://issues.apache.org/jira/browse/OFBIZ-11037
 Project: OFBiz
  Issue Type: Improvement
  Components: party
Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
Reporter: Pierre Smits






--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Assigned] (OFBIZ-11037) Improve PartyAcctgPrefAndGroup to reflect all fields from the PartyAcctgPreference entity

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11037?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits reassigned OFBIZ-11037:


Assignee: Pierre Smits

> Improve PartyAcctgPrefAndGroup to reflect all fields from the 
> PartyAcctgPreference entity
> -
>
> Key: OFBIZ-11037
> URL: https://issues.apache.org/jira/browse/OFBIZ-11037
> Project: OFBiz
>  Issue Type: Improvement
>  Components: party
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: internalOrganisation, view
>




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Created] (OFBIZ-11038) Unable to view a PartyContent on view profile page of a party

2019-05-16 Thread Devanshu Vyas (JIRA)
Devanshu Vyas created OFBIZ-11038:
-

 Summary: Unable to view a PartyContent on view profile page of a 
party
 Key: OFBIZ-11038
 URL: https://issues.apache.org/jira/browse/OFBIZ-11038
 Project: OFBiz
  Issue Type: Bug
  Components: party
Reporter: Devanshu Vyas
 Attachments: Error_message.png, PartyContent_View.png

* Go to [partymgr|https://demo-trunk.ofbiz.apache.org/partymgr/control/main]
* Search any party(e.g. DemoCustomer)
* Go to the [party 
profile|https://demo-trunk.ofbiz.apache.org/partymgr/control/viewprofile?partyId=DemoCustomer]
 page
* Go to Party Content section on the page and upload a file
* Select a purpose(Logo Image Url) and click on the Upload button
* On page refresh, click on the view button to view the image uploaded. 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-10969) Unable to create Employments

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841406#comment-16841406
 ] 

Jacques Le Roux commented on OFBIZ-10969:
-

Thanks Olivier,

That all makes sense. It seems to me that we should wait for recruitment test 
scenario to be enforced before committing, right?

> Unable to create Employments
> 
>
> Key: OFBIZ-10969
> URL: https://issues.apache.org/jira/browse/OFBIZ-10969
> Project: OFBiz
>  Issue Type: Bug
>  Components: humanres
>Affects Versions: Trunk
>Reporter: Arpit Mor
>Assignee: Jacques Le Roux
>Priority: Major
> Attachments: Image1.png
>
>
> Steps to regenerate:
>  # Login to the URL: 
> [https://demo-trunk.ofbiz.apache.org/humanres/control/main]
>  # Click on Employments
>  # Click on New Employments
>  # Click on Create
> Actual: Error message is displayed. Please refer attachment: Image1



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11037) Improve PartyAcctgPrefAndGroup to reflect all fields from the PartyAcctgPreference entity

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11037?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-11037:
-
Labels: internalOrganisation view  (was: )

> Improve PartyAcctgPrefAndGroup to reflect all fields from the 
> PartyAcctgPreference entity
> -
>
> Key: OFBIZ-11037
> URL: https://issues.apache.org/jira/browse/OFBIZ-11037
> Project: OFBiz
>  Issue Type: Improvement
>  Components: party
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Priority: Major
>  Labels: internalOrganisation, view
>




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-11026) HR Doc drive by process

2019-05-16 Thread Olivier Heintz (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-11026?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841397#comment-16841397
 ] 

Olivier Heintz commented on OFBIZ-11026:


Hi Jacques,

I want to do too many modifications in one time ;), your remark is link to the 
Jira I have just created OFBIZ-11036
to have one more level for each application and not too long chapter number

> HR Doc drive by process
> ---
>
> Key: OFBIZ-11026
> URL: https://issues.apache.org/jira/browse/OFBIZ-11026
> Project: OFBiz
>  Issue Type: Sub-task
>  Components: humanres
>Affects Versions: Trunk
>Reporter: Olivier Heintz
>Priority: Major
>  Labels: Documentation, humanres
> Attachments: OFBIZ-11026_hr-intro.adoc.patch, 
> OFBIZ-11026_humanres.adoc.patch
>
>
> Currently HR doc main chapters are on core HR object, I propose to group them 
> in a chapter and having a chapter by process in the same level bot group in 
> the HR Process.
> Each process is described via a scenario explained like a tutorial, and each 
> time a core object is used, a link is done to its chapter.
> To help review : doc with these modifications are available at 
> [https://ofbizadoc.ofbizextra.org/html5/user-manual.html#_human_resources]
> and Apache OFBiz standard (without modifications) is available too at 
> https://ofbizadoc.ofbizextra.org/html5/user-manual-std.html#_human_resources
> current HR TOC
>  --
>  3.2. Human Resources
>      3.2.1. About Human Resources
>      3.2.2. Human Resources Processes
>      3.2.3. Employee Positions
>      3.2.4. Employees
>      3.2.5. Employments
>      3.2.6. Performance Review
>      3.2.7. Qualifications
>      3.2.8. Recruitment
>      3.2.9. Skills
>      3.2.10. Resumes
>      3.2.11. Training
>      3.2.12. Leave
>      3.2.13. Security
>      3.2.14. Global HR Settings
>      3.2.15. Glossary
>  Proposed HR TOC
>  
>  4. Human Resources
>      4.1. About this documentation
>      4.2. About Human Resources
>      4.3. HR Processes
>      4.3.1. Organization, Job Position and Definition
>      4.3.2. Recruitment, Candidate Selection and Hiring
>      4.3.3. Employee Training and Development
>      4.3.4. Performance Management and Employee Evaluation
>      4.3.5. Employee Salary and Benefits Administration
>      4.4. HR core object
>      4.4.1. Employee Positions
>      4.4.2. Employees
>      4.4.3. Employments
>      4.4.4. Performance Review
>      4.4.5. Qualifications
>      4.4.6. Recruitment
>      4.4.7. Skills
>      4.4.8. Resumes
>      4.4.9. Training
>      4.4.10. Leave
>      4.4.11. Security
>      4.5. Global HR Settings
>      4.5.1. Skills Types
>      4.6. HR Data model
>      4.6.1. Employee Position
>      4.6.2. Employment
>      4.6.3. Qualification, Skill, Review
>      4.6.4. HR App intra-application integration
>      4.7. Glossary



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11036) User Manual : change the level of from 2 to 1

2019-05-16 Thread Olivier Heintz (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11036?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Olivier Heintz updated OFBIZ-11036:
---
Description: 
If  is on level 1,  it become a main separator in 
TOC not a chapter
  TOC become
{code:java}
...
 2. Quick start
 Core Business Applications
     3. Accounting
     4. Human Resources
 {code}
and so we have one more level (in TOC) for each application

  was:
{{If  is on level 1,  it become a main separator in 
TOC not a chapter}}
{{ TOC become}}
{{}}
...
2. Quick start
Core Business Applications
    3. Accounting
    4. Human Resources
{{and so we have one more level (in TOC) for each application}}


> User Manual : change the level  of  from 2 to 1
> --
>
> Key: OFBIZ-11036
> URL: https://issues.apache.org/jira/browse/OFBIZ-11036
> Project: OFBiz
>  Issue Type: Sub-task
>  Components: ALL APPLICATIONS
>Affects Versions: Trunk
>Reporter: Olivier Heintz
>Priority: Minor
>
> If  is on level 1,  it become a main separator in 
> TOC not a chapter
>   TOC become
> {code:java}
> ...
>  2. Quick start
>  Core Business Applications
>      3. Accounting
>      4. Human Resources
>  {code}
> and so we have one more level (in TOC) for each application



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-10187) OWASP sanitizer breaks proper rendering of HTML code

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10187?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841384#comment-16841384
 ] 

Jacques Le Roux commented on OFBIZ-10187:
-

Actually I checked the changes since Nov 24th (or something like that) and, 
from what I recall, there were no changes in this part. But I could have missed 
something. I think it's safe to add them, even it's not a biggie.

> OWASP sanitizer breaks proper rendering of HTML code
> 
>
> Key: OFBIZ-10187
> URL: https://issues.apache.org/jira/browse/OFBIZ-10187
> Project: OFBiz
>  Issue Type: Bug
>  Components: ALL COMPONENTS
>Affects Versions: Trunk, 16.11.04, Release Branch 17.12, Release Branch 
> 18.12
>Reporter: Michael Brohl
>Assignee: Michael Brohl
>Priority: Critical
>  Labels: backport-needed
> Fix For: 17.12.01, 16.11.06, 18.12.01
>
> Attachments: 
> OFBIZ-10187_Rewrite-CustomPermissivePolicy-matchesEithe.patch, 
> OFBIZ-10187_Sanitizer.patch, OFBIZ-10187_Sanitizer_16.11.patch, 
> OFBIZ-10187_Sanitizer_New.patch
>
>
> The current implementation of the sanitizer breaks the proper rendering of 
> html code. In our case, class attributes are stripped from the html content.
> Example:
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> will be rendered to
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> I do not see any reason to not allow class attributes in html code. There 
> might be other problems with these rules but this is a showstopper.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Created] (OFBIZ-11036) User Manual : change the level of from 2 to 1

2019-05-16 Thread Olivier Heintz (JIRA)
Olivier Heintz created OFBIZ-11036:
--

 Summary: User Manual : change the level  of  from 2 to 1
 Key: OFBIZ-11036
 URL: https://issues.apache.org/jira/browse/OFBIZ-11036
 Project: OFBiz
  Issue Type: Sub-task
  Components: ALL APPLICATIONS
Affects Versions: Trunk
Reporter: Olivier Heintz


{{If  is on level 1,  it become a main separator in 
TOC not a chapter}}
{{ TOC become}}
{{}}
...
2. Quick start
Core Business Applications
    3. Accounting
    4. Human Resources
{{and so we have one more level (in TOC) for each application}}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-10187) OWASP sanitizer breaks proper rendering of HTML code

2019-05-16 Thread Dennis Balkir (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10187?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841370#comment-16841370
 ] 

Dennis Balkir commented on OFBIZ-10187:
---

Hi Jacques,

you are right, these are missing in my version.

I checked it and it seems, that the ebay version on github was changed on 25th 
march this year, so it might be possible, that the missing components just 
weren't in this file as I used it as a template for my changes.

I didn't add them myself, because I thought, that they are not important enough 
to put them inside of an OFBiz policy opposing to the ones I added, which are 
quite important for current development with HTML 5.

> OWASP sanitizer breaks proper rendering of HTML code
> 
>
> Key: OFBIZ-10187
> URL: https://issues.apache.org/jira/browse/OFBIZ-10187
> Project: OFBiz
>  Issue Type: Bug
>  Components: ALL COMPONENTS
>Affects Versions: Trunk, 16.11.04, Release Branch 17.12, Release Branch 
> 18.12
>Reporter: Michael Brohl
>Assignee: Michael Brohl
>Priority: Critical
>  Labels: backport-needed
> Fix For: 17.12.01, 16.11.06, 18.12.01
>
> Attachments: 
> OFBIZ-10187_Rewrite-CustomPermissivePolicy-matchesEithe.patch, 
> OFBIZ-10187_Sanitizer.patch, OFBIZ-10187_Sanitizer_16.11.patch, 
> OFBIZ-10187_Sanitizer_New.patch
>
>
> The current implementation of the sanitizer breaks the proper rendering of 
> html code. In our case, class attributes are stripped from the html content.
> Example:
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> will be rendered to
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> I do not see any reason to not allow class attributes in html code. There 
> might be other problems with these rules but this is a showstopper.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-10187) OWASP sanitizer breaks proper rendering of HTML code

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10187?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841361#comment-16841361
 ] 

Jacques Le Roux commented on OFBIZ-10187:
-

To be totally clear I compared the 2 versions. This is what I found:

You added
.allowAttributes("target").matching(NAME).onElements("a")
and the elements "header",  "picture", "source", "section", "nav", "footer"

On the other side there is more:
.allowAttributes("background").matching(ONSITE_URL)
.onElements("table")
.allowAttributes("background").matching(ONSITE_URL)
.onElements("td", "th", "tr")

Are the later missing on purpose?

I was also surprised how slight is 
https://github.com/OWASP/java-html-sanitizer/blob/master/src/main/java/org/owasp/html/examples/SlashdotPolicyExample.java

Anyway I'll try to use that as safe in a 1st step and will reserve eBay one as 
permissive as you did (ie will not change anything from your work).




> OWASP sanitizer breaks proper rendering of HTML code
> 
>
> Key: OFBIZ-10187
> URL: https://issues.apache.org/jira/browse/OFBIZ-10187
> Project: OFBiz
>  Issue Type: Bug
>  Components: ALL COMPONENTS
>Affects Versions: Trunk, 16.11.04, Release Branch 17.12, Release Branch 
> 18.12
>Reporter: Michael Brohl
>Assignee: Michael Brohl
>Priority: Critical
>  Labels: backport-needed
> Fix For: 17.12.01, 16.11.06, 18.12.01
>
> Attachments: 
> OFBIZ-10187_Rewrite-CustomPermissivePolicy-matchesEithe.patch, 
> OFBIZ-10187_Sanitizer.patch, OFBIZ-10187_Sanitizer_16.11.patch, 
> OFBIZ-10187_Sanitizer_New.patch
>
>
> The current implementation of the sanitizer breaks the proper rendering of 
> html code. In our case, class attributes are stripped from the html content.
> Example:
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> will be rendered to
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> I do not see any reason to not allow class attributes in html code. There 
> might be other problems with these rules but this is a showstopper.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-10969) Unable to create Employments

2019-05-16 Thread Olivier Heintz (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841341#comment-16841341
 ] 

Olivier Heintz commented on OFBIZ-10969:


In the HR test scenario, I start by create an employee and after an employment, 
so all works !

In the recruitment test scenario I will create a Party (without role EMPLOYEE) 
and after selection process I will test createEmployment to check if it do the 
EMPLOYEE role creation.

For now, I have added in the createEmployment service the call to 
ensurePartyRoleTo service, so now it works, even if before, partyTo is'nt 
associated to roleType EMPLOYEE.
And update the OFBIZ-11028 patch

Jacques, thank you for the test.

> Unable to create Employments
> 
>
> Key: OFBIZ-10969
> URL: https://issues.apache.org/jira/browse/OFBIZ-10969
> Project: OFBiz
>  Issue Type: Bug
>  Components: humanres
>Affects Versions: Trunk
>Reporter: Arpit Mor
>Assignee: Jacques Le Roux
>Priority: Major
> Attachments: Image1.png
>
>
> Steps to regenerate:
>  # Login to the URL: 
> [https://demo-trunk.ofbiz.apache.org/humanres/control/main]
>  # Click on Employments
>  # Click on New Employments
>  # Click on Create
> Actual: Error message is displayed. Please refer attachment: Image1



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Comment Edited] (OFBIZ-10991) Have a SalesChannel dimension

2019-05-16 Thread Pierre Smits (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10991?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841338#comment-16841338
 ] 

Pierre Smits edited comment on OFBIZ-10991 at 5/16/19 1:30 PM:
---

Thank you for your feedback and suggestion(s), [~suraj.khurana]

The project does not need, IMO, contributors that 'manage' tickets. A 'parent' 
ticket works well for sub-tasks, not for other tickets (well, maybe for new 
feature tickets).

After all, any contributor is quite capable of working a ticket without 
management. We're all volunteers here. And each should be able to get an 
overview of what his set of open tickets are.

But if you want an overview (or more) of what is being worked on in the greater 
context of this ticket, have a look at:
 # [OFBiz BI 
page|https://cwiki.apache.org/confluence/display/OFBIZ/Business+Intelligence]
 # [Apache OFBiz 
(dashboard)|https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12310603]


was (Author: pfm.smits):
Thank you for your feedback and suggestion(s), [~suraj.khurana]

The project does not, IMO, contributors that 'manage' tickets. A 'parent' 
ticket works well for sub-tasks, not for other tickets (well, maybe for new 
feature tickets).

After all, any contributor is quite capable of working a ticket without 
management. We're all volunteers here. And each should be able to get an 
overview of what his set of open tickets are.

But if you want an overview (or more) of what is being worked on in the greater 
context of this ticket, have a look at:
 # [OFBiz BI 
page|https://cwiki.apache.org/confluence/display/OFBIZ/Business+Intelligence]
 # [Apache OFBiz 
(dashboard)|https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12310603]

> Have a SalesChannel dimension
> -
>
> Key: OFBIZ-10991
> URL: https://issues.apache.org/jira/browse/OFBIZ-10991
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: SalesChannel, SalesChannelDimension, birt, dimension, dwh
>
> The component would benefit from a sales channel dimension for future fact 
> tables and star schema view entities



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Comment Edited] (OFBIZ-10991) Have a SalesChannel dimension

2019-05-16 Thread Pierre Smits (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10991?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841338#comment-16841338
 ] 

Pierre Smits edited comment on OFBIZ-10991 at 5/16/19 1:28 PM:
---

Thank you for your feedback and suggestion(s), [~suraj.khurana]

The project does not, IMO, contributors that 'manage' tickets. A 'parent' 
ticket works well for sub-tasks, not for other tickets (well, maybe for new 
feature tickets).

After all, any contributor is quite capable of working a ticket without 
management. We're all volunteers here. And each should be able to get an 
overview of what his set of open tickets are.

But if you want an overview (or more) of what is being worked on in the greater 
context of this ticket, have a look at:
 # [OFBiz BI 
page|https://cwiki.apache.org/confluence/display/OFBIZ/Business+Intelligence]
 # [Apache OFBiz 
(dashboard)|https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12310603]


was (Author: pfm.smits):
Thank you for your feedback and suggestion(s), [~suraj.khurana]

The project does not, IMO, contributors that 'manage' tickets. A 'parent' 
ticket works well for sub-tasks, not for other tickets (well, maybe for new 
feature tickets).

After all, any contributor is quite capable of working a ticket without 
management. We're all volunteers here. And each should be able to get an 
overview of what his set of open tickets are.

But if you want an overview (or more) of what is being worked on in the greater 
context of this ticket, have a look at:
 # [https://cwiki.apache.org/confluence/display/OFBIZ/Business+Intelligence]
 # [[Apache OFBiz 
(dashboard)|https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12310603]

> Have a SalesChannel dimension
> -
>
> Key: OFBIZ-10991
> URL: https://issues.apache.org/jira/browse/OFBIZ-10991
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: SalesChannel, SalesChannelDimension, birt, dimension, dwh
>
> The component would benefit from a sales channel dimension for future fact 
> tables and star schema view entities



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-10991) Have a SalesChannel dimension

2019-05-16 Thread Pierre Smits (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10991?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841338#comment-16841338
 ] 

Pierre Smits commented on OFBIZ-10991:
--

Thank you for your feedback and suggestion(s), [~suraj.khurana]

The project does not, IMO, contributors that 'manage' tickets. A 'parent' 
ticket works well for sub-tasks, not for other tickets (well, maybe for new 
feature tickets).

After all, any contributor is quite capable of working a ticket without 
management. We're all volunteers here. And each should be able to get an 
overview of what his set of open tickets are.

But if you want an overview (or more) of what is being worked on in the greater 
context of this ticket, have a look at:
 # [https://cwiki.apache.org/confluence/display/OFBIZ/Business+Intelligence]
 # [[Apache OFBiz 
(dashboard)|https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12310603]|https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12310603]

> Have a SalesChannel dimension
> -
>
> Key: OFBIZ-10991
> URL: https://issues.apache.org/jira/browse/OFBIZ-10991
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: SalesChannel, SalesChannelDimension, birt, dimension, dwh
>
> The component would benefit from a sales channel dimension for future fact 
> tables and star schema view entities



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Comment Edited] (OFBIZ-10991) Have a SalesChannel dimension

2019-05-16 Thread Pierre Smits (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10991?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841338#comment-16841338
 ] 

Pierre Smits edited comment on OFBIZ-10991 at 5/16/19 1:27 PM:
---

Thank you for your feedback and suggestion(s), [~suraj.khurana]

The project does not, IMO, contributors that 'manage' tickets. A 'parent' 
ticket works well for sub-tasks, not for other tickets (well, maybe for new 
feature tickets).

After all, any contributor is quite capable of working a ticket without 
management. We're all volunteers here. And each should be able to get an 
overview of what his set of open tickets are.

But if you want an overview (or more) of what is being worked on in the greater 
context of this ticket, have a look at:
 # [https://cwiki.apache.org/confluence/display/OFBIZ/Business+Intelligence]
 # [[Apache OFBiz 
(dashboard)|https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12310603]


was (Author: pfm.smits):
Thank you for your feedback and suggestion(s), [~suraj.khurana]

The project does not, IMO, contributors that 'manage' tickets. A 'parent' 
ticket works well for sub-tasks, not for other tickets (well, maybe for new 
feature tickets).

After all, any contributor is quite capable of working a ticket without 
management. We're all volunteers here. And each should be able to get an 
overview of what his set of open tickets are.

But if you want an overview (or more) of what is being worked on in the greater 
context of this ticket, have a look at:
 # [https://cwiki.apache.org/confluence/display/OFBIZ/Business+Intelligence]
 # [[Apache OFBiz 
(dashboard)|https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12310603]|https://issues.apache.org/jira/secure/Dashboard.jspa?selectPageId=12310603]

> Have a SalesChannel dimension
> -
>
> Key: OFBIZ-10991
> URL: https://issues.apache.org/jira/browse/OFBIZ-10991
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: SalesChannel, SalesChannelDimension, birt, dimension, dwh
>
> The component would benefit from a sales channel dimension for future fact 
> tables and star schema view entities



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11028) field emplFromDate is forgot in PayHistory entity

2019-05-16 Thread Olivier Heintz (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11028?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Olivier Heintz updated OFBIZ-11028:
---
Attachment: OFBIZ-11028.patch

> field emplFromDate is forgot in PayHistory entity
> -
>
> Key: OFBIZ-11028
> URL: https://issues.apache.org/jira/browse/OFBIZ-11028
> Project: OFBiz
>  Issue Type: Bug
>  Components: humanres
>Affects Versions: Trunk, 17.12.01, 18.12.01
>Reporter: Olivier Heintz
>Assignee: Jacques Le Roux
>Priority: Major
>  Labels: humanres
> Fix For: Trunk
>
> Attachments: OFBIZ-11028.patch, OFBIZ-11028.patch
>
>
> A Employment can have multiple PayHistory and should have multiple 
> because PayHistory should show history of Pay  for a employment  !
> Currently, in PayHistory the field fromDate from Employment is confused with 
> fromDate about the current record, it's necessary to have a field 
> emplFromDate (to have the complete employment primaryKey).
> Currently user interface for PayHistory is not working, when modifying a 
> PayRecord the current should be expire and a new one should be created.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Comment Edited] (OFBIZ-11021) The drop-ship process behaves incorrectly when a combination of drop-ship and non-drop-ship products are added into the cart

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-11021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841293#comment-16841293
 ] 

Jacques Le Roux edited comment on OFBIZ-11021 at 5/16/19 12:50 PM:
---

Thanks,

It would be hard to make it more clear :)

BTW my comment was more for new issues to come ;)


was (Author: jacques.le.roux):
Thanks,

It would be hard to make it more clear :)

> The drop-ship process behaves incorrectly when a combination of drop-ship and 
> non-drop-ship products are added into the cart
> 
>
> Key: OFBIZ-11021
> URL: https://issues.apache.org/jira/browse/OFBIZ-11021
> Project: OFBiz
>  Issue Type: Bug
>  Components: order
>Affects Versions: Trunk, Release Branch 18.12
>Reporter: Pawan Verma
>Assignee: Suraj Khurana
>Priority: Major
> Attachments: OFBIZ-11021.patch
>
>
> The drop-ship process behaves incorrectly when a combination of drop-ship and 
> non-drop-ship products are added into the cart.
>   
>  Suppose we have two items in the cart:
>  # The first item is drop-shippable.
>  # The second item is not drop-shippable.
> For the first item, the implementation works fine.
>  For the second item, this is not working correctly.
>   
>  For drop shipment process, cart method 'createDropShipGroups' decides 
> RequirementMethodEnumId in the order of property set at ProductStore -> 
> ProductFacility -> Product which work fine in case of all drop-ship products 
> and if the drop-ship product(s) is added last in the cart.
>   
>  The issue I found is that if a combination of a dropship and non-drop ship 
> products are added into the cart and the non-drop shippable product(s) is 
> added after the drop shippable product(s) then the non-drop-shippable 
> products also considered as drop-shippable.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Comment Edited] (OFBIZ-11021) The drop-ship process behaves incorrectly when a combination of drop-ship and non-drop-ship products are added into the cart

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-11021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841277#comment-16841277
 ] 

Jacques Le Roux edited comment on OFBIZ-11021 at 5/16/19 12:49 PM:
---

Sure [~jacques.le.roux],

RequirementMethodEnumId should be decided in the order of property set at 
ProductStore -> Facility -> Product for each order item which was not working 
if the non-drop shippable product(s) is added after the drop shippable 
product(s).

*Original Flow:* requirementMethodEnumId was initialized outside the loop and 
once it is initialized with Product level information it never gets 
re-initialized if Product is non-drop shippable.

I have updated the code to use the storeRequirementMethodEnumId variable for 
store level information which is defined outside the loop and this will be used 
to initialize requirementMethodEnumId for each order item and then product 
level information can override it. That means for each product *ProductStore -> 
Facility -> Product* this rule will work properly.

Hope It is more clear now. Thanks!


was (Author: pawan.verma):
Sure [~jacques.le.roux],

RequirementMethodEnumId should be decided in the order of property set at 
ProductStore -> Facility -> Product for each order item which was not working 
if the non-drop shippable product(s) is added after the drop shippable 
product(s).

*Original Flow:* requirementMethodEnumId was initialized outside the loop and 
once it is initialized with Product level information it never gets 
re-initialized if Product is non-drop shippable.

I have updated the code to use the storeRequirementMethodEnumId variable for 
store level information which is defined outside the loop and this will be used 
to initialize requirementMethodEnumId for each order item and then product 
level information can override it. That means for each product *ProductStore -> 
Facility -> Product* this rule will work properly.

 

Hope It is more clear now. Thanks!

 

> The drop-ship process behaves incorrectly when a combination of drop-ship and 
> non-drop-ship products are added into the cart
> 
>
> Key: OFBIZ-11021
> URL: https://issues.apache.org/jira/browse/OFBIZ-11021
> Project: OFBiz
>  Issue Type: Bug
>  Components: order
>Affects Versions: Trunk, Release Branch 18.12
>Reporter: Pawan Verma
>Assignee: Suraj Khurana
>Priority: Major
> Attachments: OFBIZ-11021.patch
>
>
> The drop-ship process behaves incorrectly when a combination of drop-ship and 
> non-drop-ship products are added into the cart.
>   
>  Suppose we have two items in the cart:
>  # The first item is drop-shippable.
>  # The second item is not drop-shippable.
> For the first item, the implementation works fine.
>  For the second item, this is not working correctly.
>   
>  For drop shipment process, cart method 'createDropShipGroups' decides 
> RequirementMethodEnumId in the order of property set at ProductStore -> 
> ProductFacility -> Product which work fine in case of all drop-ship products 
> and if the drop-ship product(s) is added last in the cart.
>   
>  The issue I found is that if a combination of a dropship and non-drop ship 
> products are added into the cart and the non-drop shippable product(s) is 
> added after the drop shippable product(s) then the non-drop-shippable 
> products also considered as drop-shippable.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-11021) The drop-ship process behaves incorrectly when a combination of drop-ship and non-drop-ship products are added into the cart

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-11021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841293#comment-16841293
 ] 

Jacques Le Roux commented on OFBIZ-11021:
-

Thanks,

It would be hard to make it more clear :)

> The drop-ship process behaves incorrectly when a combination of drop-ship and 
> non-drop-ship products are added into the cart
> 
>
> Key: OFBIZ-11021
> URL: https://issues.apache.org/jira/browse/OFBIZ-11021
> Project: OFBiz
>  Issue Type: Bug
>  Components: order
>Affects Versions: Trunk, Release Branch 18.12
>Reporter: Pawan Verma
>Assignee: Suraj Khurana
>Priority: Major
> Attachments: OFBIZ-11021.patch
>
>
> The drop-ship process behaves incorrectly when a combination of drop-ship and 
> non-drop-ship products are added into the cart.
>   
>  Suppose we have two items in the cart:
>  # The first item is drop-shippable.
>  # The second item is not drop-shippable.
> For the first item, the implementation works fine.
>  For the second item, this is not working correctly.
>   
>  For drop shipment process, cart method 'createDropShipGroups' decides 
> RequirementMethodEnumId in the order of property set at ProductStore -> 
> ProductFacility -> Product which work fine in case of all drop-ship products 
> and if the drop-ship product(s) is added last in the cart.
>   
>  The issue I found is that if a combination of a dropship and non-drop ship 
> products are added into the cart and the non-drop shippable product(s) is 
> added after the drop shippable product(s) then the non-drop-shippable 
> products also considered as drop-shippable.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-10187) OWASP sanitizer breaks proper rendering of HTML code

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10187?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841292#comment-16841292
 ] 

Jacques Le Roux commented on OFBIZ-10187:
-

Thanks Dennis,

Yes it quite helps :)

> OWASP sanitizer breaks proper rendering of HTML code
> 
>
> Key: OFBIZ-10187
> URL: https://issues.apache.org/jira/browse/OFBIZ-10187
> Project: OFBiz
>  Issue Type: Bug
>  Components: ALL COMPONENTS
>Affects Versions: Trunk, 16.11.04, Release Branch 17.12, Release Branch 
> 18.12
>Reporter: Michael Brohl
>Assignee: Michael Brohl
>Priority: Critical
>  Labels: backport-needed
> Fix For: 17.12.01, 16.11.06, 18.12.01
>
> Attachments: 
> OFBIZ-10187_Rewrite-CustomPermissivePolicy-matchesEithe.patch, 
> OFBIZ-10187_Sanitizer.patch, OFBIZ-10187_Sanitizer_16.11.patch, 
> OFBIZ-10187_Sanitizer_New.patch
>
>
> The current implementation of the sanitizer breaks the proper rendering of 
> html code. In our case, class attributes are stripped from the html content.
> Example:
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> will be rendered to
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> I do not see any reason to not allow class attributes in html code. There 
> might be other problems with these rules but this is a showstopper.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-10991) Have a SalesChannel dimension

2019-05-16 Thread Suraj Khurana (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10991?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841290#comment-16841290
 ] 

Suraj Khurana commented on OFBIZ-10991:
---

Hello [~pfm.smits],

I think it would be better if we create a parent ticket with all this subtask 
so that this effort is properly managed.

Just my two cents !!

> Have a SalesChannel dimension
> -
>
> Key: OFBIZ-10991
> URL: https://issues.apache.org/jira/browse/OFBIZ-10991
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: SalesChannel, SalesChannelDimension, birt, dimension, dwh
>
> The component would benefit from a sales channel dimension for future fact 
> tables and star schema view entities



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Comment Edited] (OFBIZ-11029) Issue in function getVariantSelectionFeatures of ProductWorker.java

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-11029?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16839737#comment-16839737
 ] 

Jacques Le Roux edited comment on OFBIZ-11029 at 5/16/19 12:46 PM:
---

Thanks Aditya for changing the affected versions.

Pawan, though in this case it's obvious, in generarl we never know when a bug 
will be fixed. So, by and large, we use releases branches in affected versions 
and not directly a release version.


was (Author: jacques.le.roux):
Thanks Aditya for changing the affected versions.

Pawan, though in this case it's obvious, in generarlwe never know when a bug 
will be fixed. So, by and large, we use releases branches in affected versions 
and not directly a release version.

> Issue in function getVariantSelectionFeatures of ProductWorker.java
> ---
>
> Key: OFBIZ-11029
> URL: https://issues.apache.org/jira/browse/OFBIZ-11029
> Project: OFBiz
>  Issue Type: Bug
>  Components: product
>Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, 
> Release Branch 18.12
>Reporter: Denglong Zhou
>Assignee: Aditya Sharma
>Priority: Major
>  Labels: product, variant
> Fix For: 17.12.01, 16.11.06, 18.12.01
>
> Attachments: OFBIZ-11029.patch
>
>   Original Estimate: 0.25h
>  Remaining Estimate: 0.25h
>
> {code:java}
> //代码占位符
> public static List getVariantSelectionFeatures(GenericValue 
> variantProduct) {
> if (!"Y".equals(variantProduct.getString("isVariant"))) {
> return null;
> }
> GenericValue virtualProduct = 
> ProductWorker.getParentProduct(variantProduct.getString("productId"), 
> variantProduct.getDelegator());
> if (virtualProduct == null || 
> !"Y".equals(virtualProduct.getString("productId"))) {
> return null;
> }
> {code}
> for the above coding, i guess the part colored by red should be the following,
> {code:java}
> //代码占位符
> if (virtualProduct == null || 
> !"Y".equals(virtualProduct.getString("isVirtual"))) {
> {code}
> thanks!
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-11021) The drop-ship process behaves incorrectly when a combination of drop-ship and non-drop-ship products are added into the cart

2019-05-16 Thread Pawan Verma (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-11021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841277#comment-16841277
 ] 

Pawan Verma commented on OFBIZ-11021:
-

Sure [~jacques.le.roux],

RequirementMethodEnumId should be decided in the order of property set at 
ProductStore -> Facility -> Product for each order item which was not working 
if the non-drop shippable product(s) is added after the drop shippable 
product(s).

*Original Flow:* requirementMethodEnumId was initialized outside the loop and 
once it is initialized with Product level information it never gets 
re-initialized if Product is non-drop shippable.

I have updated the code to use the storeRequirementMethodEnumId variable for 
store level information which is defined outside the loop and this will be used 
to initialize requirementMethodEnumId for each order item and then product 
level information can override it. That means for each product *ProductStore -> 
Facility -> Product* this rule will work properly.

 

Hope It is more clear now. Thanks!

 

> The drop-ship process behaves incorrectly when a combination of drop-ship and 
> non-drop-ship products are added into the cart
> 
>
> Key: OFBIZ-11021
> URL: https://issues.apache.org/jira/browse/OFBIZ-11021
> Project: OFBiz
>  Issue Type: Bug
>  Components: order
>Affects Versions: Trunk, Release Branch 18.12
>Reporter: Pawan Verma
>Assignee: Suraj Khurana
>Priority: Major
> Attachments: OFBIZ-11021.patch
>
>
> The drop-ship process behaves incorrectly when a combination of drop-ship and 
> non-drop-ship products are added into the cart.
>   
>  Suppose we have two items in the cart:
>  # The first item is drop-shippable.
>  # The second item is not drop-shippable.
> For the first item, the implementation works fine.
>  For the second item, this is not working correctly.
>   
>  For drop shipment process, cart method 'createDropShipGroups' decides 
> RequirementMethodEnumId in the order of property set at ProductStore -> 
> ProductFacility -> Product which work fine in case of all drop-ship products 
> and if the drop-ship product(s) is added last in the cart.
>   
>  The issue I found is that if a combination of a dropship and non-drop ship 
> products are added into the cart and the non-drop shippable product(s) is 
> added after the drop shippable product(s) then the non-drop-shippable 
> products also considered as drop-shippable.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-11029) Issue in function getVariantSelectionFeatures of ProductWorker.java

2019-05-16 Thread Denglong Zhou (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-11029?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841228#comment-16841228
 ] 

Denglong Zhou commented on OFBIZ-11029:
---

Thanks you all for the quick fix, great team!

> Issue in function getVariantSelectionFeatures of ProductWorker.java
> ---
>
> Key: OFBIZ-11029
> URL: https://issues.apache.org/jira/browse/OFBIZ-11029
> Project: OFBiz
>  Issue Type: Bug
>  Components: product
>Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, 
> Release Branch 18.12
>Reporter: Denglong Zhou
>Assignee: Aditya Sharma
>Priority: Major
>  Labels: product, variant
> Fix For: 17.12.01, 16.11.06, 18.12.01
>
> Attachments: OFBIZ-11029.patch
>
>   Original Estimate: 0.25h
>  Remaining Estimate: 0.25h
>
> {code:java}
> //代码占位符
> public static List getVariantSelectionFeatures(GenericValue 
> variantProduct) {
> if (!"Y".equals(variantProduct.getString("isVariant"))) {
> return null;
> }
> GenericValue virtualProduct = 
> ProductWorker.getParentProduct(variantProduct.getString("productId"), 
> variantProduct.getDelegator());
> if (virtualProduct == null || 
> !"Y".equals(virtualProduct.getString("productId"))) {
> return null;
> }
> {code}
> for the above coding, i guess the part colored by red should be the following,
> {code:java}
> //代码占位符
> if (virtualProduct == null || 
> !"Y".equals(virtualProduct.getString("isVirtual"))) {
> {code}
> thanks!
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10945) loadSalesInvoiceFact doesn't get invoked on setInvoiceStatus

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10945?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10945:
-
Labels: Fact SalesInvoiceItemFact SalesInvoiceItemStarSchema birt dwh 
invoice  (was: Fact SalesInvoiceItemStarSchema birt dwh invoice)

> loadSalesInvoiceFact doesn't get invoked on setInvoiceStatus
> 
>
> Key: OFBIZ-10945
> URL: https://issues.apache.org/jira/browse/OFBIZ-10945
> Project: OFBiz
>  Issue Type: Bug
>  Components: bi
>Affects Versions: Trunk, Release Branch 15.12, Release Branch 16.11, 
> Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Priority: Major
>  Labels: Fact, SalesInvoiceItemFact, SalesInvoiceItemStarSchema, 
> birt, dwh, invoice
>
> When the data warehouse has been initialised in the BI component, and a new 
> sales invoice is generated and set to status 'Ready for Posting' following 
> seca
> {code:java}
> 
>          value="INVOICE_READY"/>
>          to-field-name="oldStatusId"/>
>          run-as-user="system"/>
>     
> {code}
> should load new records in the SalesInvoiceItemFact table.
> This does not happen.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10945) loadSalesInvoiceFact doesn't get invoked on setInvoiceStatus

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10945?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10945:
-
Labels: Fact SalesInvoiceItemStarSchema birt dwh invoice  (was: )

> loadSalesInvoiceFact doesn't get invoked on setInvoiceStatus
> 
>
> Key: OFBIZ-10945
> URL: https://issues.apache.org/jira/browse/OFBIZ-10945
> Project: OFBiz
>  Issue Type: Bug
>  Components: bi
>Affects Versions: Trunk, Release Branch 15.12, Release Branch 16.11, 
> Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Priority: Major
>  Labels: Fact, SalesInvoiceItemStarSchema, birt, dwh, invoice
>
> When the data warehouse has been initialised in the BI component, and a new 
> sales invoice is generated and set to status 'Ready for Posting' following 
> seca
> {code:java}
> 
>          value="INVOICE_READY"/>
>          to-field-name="oldStatusId"/>
>          run-as-user="system"/>
>     
> {code}
> should load new records in the SalesInvoiceItemFact table.
> This does not happen.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10956) Have a service to load records in the CountryDimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10956?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10956:
-
Labels: CountryDimension birt country dimension dwh service  (was: birt dwh)

> Have a service to load records in the CountryDimension
> --
>
> Key: OFBIZ-10956
> URL: https://issues.apache.org/jira/browse/OFBIZ-10956
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Priority: Major
>  Labels: CountryDimension, birt, country, dimension, dwh, service
>
> Depending on [OFBIZ-10954|https://issues.apache.org/jira/browse/OFBIZ-10954]
> The service should be invoked on initialisation of the data warehouse.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11030) Convert FactServices.xml minilang to groovy

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11030?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-11030:
-
Labels: Fact dwh services  (was: dwh services)

> Convert FactServices.xml minilang to groovy
> ---
>
> Key: OFBIZ-11030
> URL: https://issues.apache.org/jira/browse/OFBIZ-11030
> Project: OFBiz
>  Issue Type: Sub-task
>  Components: bi
>Affects Versions: Trunk
>Reporter: Pierre Smits
>Priority: Major
>  Labels: Fact, dwh, services
>
> With the purpose to deprecate mini-lang OFBIZ-9350,  convert FactServices.xml



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11012) Documentation: SalesInvoiceItemStarSchema Design Updates

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11012?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-11012:
-
Labels: birt dwh starschema  (was: birt dwh)

> Documentation: SalesInvoiceItemStarSchema Design Updates
> 
>
> Key: OFBIZ-11012
> URL: https://issues.apache.org/jira/browse/OFBIZ-11012
> Project: OFBiz
>  Issue Type: Task
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Swapnil Shah
>Priority: Major
>  Labels: birt, dwh, starschema
>
> Update the documentation when the entity has changed



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11033) service 'loadSalesOrderItemFact' has hard coded currencyUomId

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11033?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-11033:
-
Labels: Fact SalesOrder SalesOrderItemFact birt dwh  (was: dwh)

> service 'loadSalesOrderItemFact' has hard coded currencyUomId
> -
>
> Key: OFBIZ-11033
> URL: https://issues.apache.org/jira/browse/OFBIZ-11033
> Project: OFBiz
>  Issue Type: Bug
>  Components: bi
>Affects Versions: Release Branch 13.07, Release Branch 14.12, Trunk, 
> Release Branch 15.12, Release Branch 16.11, Release Branch 17.12, Release 
> Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: Fact, SalesOrder, SalesOrderItemFact, birt, dwh
>
> Currency conversion in the loadSalesOrderItemFact does not work with the 
> currency of the internal organisation but has a hardcoded USD.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10948) Convert DimensionServices.xml minilang to groovy

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10948?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10948:
-
Labels: Minilang dimension dwh groovy,  (was: Minilang groovy,)

> Convert DimensionServices.xml minilang to groovy
> 
>
> Key: OFBIZ-10948
> URL: https://issues.apache.org/jira/browse/OFBIZ-10948
> Project: OFBiz
>  Issue Type: Sub-task
>  Components: bi
>Affects Versions: Trunk
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: Minilang, dimension, dwh, groovy,
>
> With the purpose to deprecate mini-lang OFBIZ-9350,  convert 
> DimensionServices.xml



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10947) Have DateDimension have a dimensionId that is based on the natural key

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10947?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10947:
-
Labels: DateDimension birt dimension dwh  (was: DateDimension birt dwh)

> Have DateDimension have a dimensionId that is based on the natural key
> --
>
> Key: OFBIZ-10947
> URL: https://issues.apache.org/jira/browse/OFBIZ-10947
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, 
> Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: DateDimension, birt, dimension, dwh
> Attachments: OFBIZ-10947-BI.patch
>
>
> Currently the record sequencer (delegator.getNextSeqId) is used to determine 
> the dimensionId for the DateDimension. This is unnecessary as the date (when 
> correctly formatted) can be used. 
> When formatted as 'MMdd' a dimensionId could be 20190423, which is a 
> correctly 'sequenced' primary key. 
> It also makes it easier to set the foreign-key in fact tables by generating 
> it based on the date, than by retrieving the dimensionId based on a retrieval 
> through the getDimensionIdFromNaturalKey service.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10953) have CurrencyDimension have a dimensionId that is based on the natural key

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10953?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10953:
-
Labels: CurrencyDimension birt currency dimension dwh  (was: birt dwh)

> have CurrencyDimension have a dimensionId that is based on the natural key
> --
>
> Key: OFBIZ-10953
> URL: https://issues.apache.org/jira/browse/OFBIZ-10953
> Project: OFBiz
>  Issue Type: Bug
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: CurrencyDimension, birt, currency, dimension, dwh
> Attachments: OFBIZ-10953-BI.patch
>
>
> Currently the record sequencer (delegator.getNextSeqId) is used to determine 
> the dimensionId for the CurrencyDimension. This is unnecessary as the uomId 
> from the UOM table can be used for currency.
> It also makes it easier to set the foreign-key in fact tables by generating 
> it based on the date provided, than by retrieving the dimensionId based on a 
> retrieval through the getDimensionIdFromNaturalKey service.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10990) Improve the SalesInvoiceItemStarSchema

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10990?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10990:
-
Labels: SalesInvoiceItemStarSchema birt dwh star starschema  (was: birt dwh)

> Improve the SalesInvoiceItemStarSchema
> --
>
> Key: OFBIZ-10990
> URL: https://issues.apache.org/jira/browse/OFBIZ-10990
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Priority: Major
>  Labels: SalesInvoiceItemStarSchema, birt, dwh, star, starschema
>
> The star schema should be improved to include elements from:
>  * Customer dimension
>  * Country dimension
>  * Store dimension
>  * Catalog dimension
>  * Channel dimension



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11031) Improve SalesOrderItemFact table

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11031?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-11031:
-
Labels: Fact SalesOrder SalesOrderItemFact birt dwh  (was: dwh)

> Improve SalesOrderItemFact table
> 
>
> Key: OFBIZ-11031
> URL: https://issues.apache.org/jira/browse/OFBIZ-11031
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Priority: Major
>  Labels: Fact, SalesOrder, SalesOrderItemFact, birt, dwh
>
> Improve the SalesOrderFactTable to include additional dimensions



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10986) Have a Store Dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10986?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10986:
-
Labels: StoreDimension birt dimension dwh store  (was: birt dwh)

> Have a Store Dimension
> --
>
> Key: OFBIZ-10986
> URL: https://issues.apache.org/jira/browse/OFBIZ-10986
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: StoreDimension, birt, dimension, dwh, store
>
> The component would benefit from a store dimension for future fact tables and 
> star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10987) Have a Catalog Dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10987?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10987:
-
Labels: CatalogDimension birt catalog dimension dwh  (was: )

> Have a Catalog Dimension
> 
>
> Key: OFBIZ-10987
> URL: https://issues.apache.org/jira/browse/OFBIZ-10987
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: CatalogDimension, birt, catalog, dimension, dwh
>
> The component would benefit from a catalog dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10991) Have a SalesChannel dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10991?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10991:
-
Labels: SalesChannel SalesChannelDimension birt dimension dwh  (was: )

> Have a SalesChannel dimension
> -
>
> Key: OFBIZ-10991
> URL: https://issues.apache.org/jira/browse/OFBIZ-10991
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: SalesChannel, SalesChannelDimension, birt, dimension, dwh
>
> The component would benefit from a sales channel dimension for future fact 
> tables and star schema view entities



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10995) Have a Brand dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10995?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10995:
-
Labels: BrandDimension birt brand dimension dwh  (was: BrandDimension birt 
dwh)

> Have a Brand dimension
> --
>
> Key: OFBIZ-10995
> URL: https://issues.apache.org/jira/browse/OFBIZ-10995
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: BrandDimension, birt, brand, dimension, dwh
>
> The component would benefit from a brand dimension for future fact tables and 
> star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10996) Have a Supplier dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10996?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10996:
-
Labels: SupplierDimension birt dimension dww supplier  (was: birt dww)

> Have a Supplier dimension
> -
>
> Key: OFBIZ-10996
> URL: https://issues.apache.org/jira/browse/OFBIZ-10996
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: SupplierDimension, birt, dimension, dww, supplier
>
> The component would benefit from a Supplier dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10946) Have a service to load records in the CustomerDimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10946?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10946:
-
Labels: CustomerDimension birt customer dimension dwh  (was: 
CustomerDimension birt dwh)

> Have a service to load records in the CustomerDimension
> ---
>
> Key: OFBIZ-10946
> URL: https://issues.apache.org/jira/browse/OFBIZ-10946
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, 
> Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: CustomerDimension, birt, customer, dimension, dwh
> Attachments: OFBIZ-10946-BI.patch
>
>
> Depending on OFBIZ-10944.
> The service must be invoked when a party gets the 'Customer' role.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10954) Have a Country Dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10954?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10954:
-
Labels: CountryDimension birt country dimension dwh geo  (was: birt dwh)

> Have a Country Dimension
> 
>
> Key: OFBIZ-10954
> URL: https://issues.apache.org/jira/browse/OFBIZ-10954
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: CountryDimension, birt, country, dimension, dwh, geo
> Attachments: OFBIZ-10954-BI.patch
>
>
> The component would benefit from a country dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10997) Have an Employee dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10997?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10997:
-
Labels: EmployeeDimension birt dimension dwh employee  (was: 
EmployeeDimension birt dwh)

> Have an Employee dimension
> --
>
> Key: OFBIZ-10997
> URL: https://issues.apache.org/jira/browse/OFBIZ-10997
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: EmployeeDimension, birt, dimension, dwh, employee
>
> The component would benefit from an employee dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11034) Have a Carrier dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11034?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-11034:
-
Labels: CarrierDimension birt carrier dimension dwh  (was: CarrierDimension 
birt dwh)

> Have a Carrier dimension
> 
>
> Key: OFBIZ-11034
> URL: https://issues.apache.org/jira/browse/OFBIZ-11034
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: CarrierDimension, birt, carrier, dimension, dwh
>
> The component would benefit from a Carrier dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10944) Have a Customer Dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10944?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10944:
-
Labels: CustomerDimension birt customer dimension dwh  (was: 
CustomerDimension birt dwh)

> Have a Customer Dimension
> -
>
> Key: OFBIZ-10944
> URL: https://issues.apache.org/jira/browse/OFBIZ-10944
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, 
> Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: CustomerDimension, birt, customer, dimension, dwh
> Attachments: OFBIZ-10944-BI.patch
>
>
> The component would benefit from a customer dimension for future fact tables 
> and star schema view entities



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10998) Have a Time dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10998?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10998:
-
Labels: TimeDimension birt dimension dwh time  (was: birt dwh)

> Have a Time dimension
> -
>
> Key: OFBIZ-10998
> URL: https://issues.apache.org/jira/browse/OFBIZ-10998
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: TimeDimension, birt, dimension, dwh, time
> Attachments: OFBIZ-10998.patch
>
>
> The component would benefit from a time dimension for future fact tables and 
> star schema view entities.
> Per comments in OFBIZ-10990



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10989) Have a Facility dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10989?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10989:
-
Labels: FacilityDimension birt dimension dwh facility  (was: 
FacilityDimension birt dwh)

> Have a Facility dimension
> -
>
> Key: OFBIZ-10989
> URL: https://issues.apache.org/jira/browse/OFBIZ-10989
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: FacilityDimension, birt, dimension, dwh, facility
>
> The component would benefit from a facility dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10988) Have a ProductCategory Dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10988?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10988:
-
Labels: ProductCategory ProductCategoryDimension birt dimension dwh  (was: 
ProductCategoryDimension birt dwh)

> Have a ProductCategory Dimension
> 
>
> Key: OFBIZ-10988
> URL: https://issues.apache.org/jira/browse/OFBIZ-10988
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: ProductCategory, ProductCategoryDimension, birt, 
> dimension, dwh
>
> The component would benefit from a product category dimension for future fact 
> tables and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10988) Have a ProductCategory Dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10988?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10988:
-
Labels: ProductCategoryDimension birt dwh  (was: )

> Have a ProductCategory Dimension
> 
>
> Key: OFBIZ-10988
> URL: https://issues.apache.org/jira/browse/OFBIZ-10988
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: ProductCategoryDimension, birt, dwh
>
> The component would benefit from a product category dimension for future fact 
> tables and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10989) Have a Facility dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10989?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10989:
-
Labels: FacilityDimension birt dwh  (was: )

> Have a Facility dimension
> -
>
> Key: OFBIZ-10989
> URL: https://issues.apache.org/jira/browse/OFBIZ-10989
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: FacilityDimension, birt, dwh
>
> The component would benefit from a facility dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10947) Have DateDimension have a dimensionId that is based on the natural key

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10947?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10947:
-
Labels: DateDimension birt dwh  (was: birt dwh)

> Have DateDimension have a dimensionId that is based on the natural key
> --
>
> Key: OFBIZ-10947
> URL: https://issues.apache.org/jira/browse/OFBIZ-10947
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, 
> Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: DateDimension, birt, dwh
> Attachments: OFBIZ-10947-BI.patch
>
>
> Currently the record sequencer (delegator.getNextSeqId) is used to determine 
> the dimensionId for the DateDimension. This is unnecessary as the date (when 
> correctly formatted) can be used. 
> When formatted as 'MMdd' a dimensionId could be 20190423, which is a 
> correctly 'sequenced' primary key. 
> It also makes it easier to set the foreign-key in fact tables by generating 
> it based on the date, than by retrieving the dimensionId based on a retrieval 
> through the getDimensionIdFromNaturalKey service.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10997) Have an Employee dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10997?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10997:
-
Labels: EmployeeDimension birt dwh  (was: birt dwh)

> Have an Employee dimension
> --
>
> Key: OFBIZ-10997
> URL: https://issues.apache.org/jira/browse/OFBIZ-10997
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: EmployeeDimension, birt, dwh
>
> The component would benefit from an employee dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10946) Have a service to load records in the CustomerDimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10946?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10946:
-
Labels: CustomerDimension birt dwh  (was: birt dwh)

> Have a service to load records in the CustomerDimension
> ---
>
> Key: OFBIZ-10946
> URL: https://issues.apache.org/jira/browse/OFBIZ-10946
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, 
> Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: CustomerDimension, birt, dwh
> Attachments: OFBIZ-10946-BI.patch
>
>
> Depending on OFBIZ-10944.
> The service must be invoked when a party gets the 'Customer' role.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10944) Have a Customer Dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10944?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10944:
-
Labels: CustomerDimension birt dwh  (was: birt)

> Have a Customer Dimension
> -
>
> Key: OFBIZ-10944
> URL: https://issues.apache.org/jira/browse/OFBIZ-10944
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 16.11, Release Branch 17.12, 
> Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: CustomerDimension, birt, dwh
> Attachments: OFBIZ-10944-BI.patch
>
>
> The component would benefit from a customer dimension for future fact tables 
> and star schema view entities



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-11034) Have a Carrier dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-11034?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-11034:
-
Labels: CarrierDimension birt dwh  (was: birt dwh)

> Have a Carrier dimension
> 
>
> Key: OFBIZ-11034
> URL: https://issues.apache.org/jira/browse/OFBIZ-11034
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: CarrierDimension, birt, dwh
>
> The component would benefit from a Carrier dimension for future fact tables 
> and star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-10995) Have a Brand dimension

2019-05-16 Thread Pierre Smits (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-10995?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pierre Smits updated OFBIZ-10995:
-
Labels: BrandDimension birt dwh  (was: birt dwh)

> Have a Brand dimension
> --
>
> Key: OFBIZ-10995
> URL: https://issues.apache.org/jira/browse/OFBIZ-10995
> Project: OFBiz
>  Issue Type: Improvement
>  Components: bi
>Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
>Reporter: Pierre Smits
>Assignee: Pierre Smits
>Priority: Major
>  Labels: BrandDimension, birt, dwh
>
> The component would benefit from a brand dimension for future fact tables and 
> star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Created] (OFBIZ-11035) Add timezone support to recurring job temporal expressions

2019-05-16 Thread Pawan Verma (JIRA)
Pawan Verma created OFBIZ-11035:
---

 Summary: Add timezone support to recurring job temporal expressions
 Key: OFBIZ-11035
 URL: https://issues.apache.org/jira/browse/OFBIZ-11035
 Project: OFBiz
  Issue Type: Improvement
  Components: framework/webtools
Affects Versions: Trunk
Reporter: Pawan Verma


Link of the discussion: [https://markmail.org/message/jsjqmjypaihbbldn]

*As per Scott:*

Trying to decide on the best way to define a *temporal* *expression* for a 
recurring job where the *temporal* *expression* should be evaluated using a 
*timezone* other than whatever the default *timezone* is for the system.

The use case is having a system that runs on UTC time but needs to send a 
report at 5 pm Pacific Time every day regardless of whether or not daylight 
savings is in effect.

Two options:
 # Add a field to *JobSandbox* such as recurrenceTimeZone (or better name!)
 # Use whatever *timezone* is available in the RunTime data service context

Based on the discussion on Dev Mailing list #1 will be used to implement this 
feature.

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Comment Edited] (OFBIZ-10187) OWASP sanitizer breaks proper rendering of HTML code

2019-05-16 Thread Dennis Balkir (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10187?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841172#comment-16841172
 ] 

Dennis Balkir edited comment on OFBIZ-10187 at 5/16/19 9:54 AM:


Hi Jacques,

sorry for my late response, but I thought that you solved this for you after 
you wrote this comment.
{quote}Mmm, finally it's not as deprecated as I thought. Because [I looked at a 
fork|https://github.com/andresriancho/owaspantisamy] when I look at what I 
think it's the original I see it's maintained:
 [https://github.com/nahsra/antisamy]
 [https://github.com/nahsra/antisamy/issues/10]

Still we are actually using [https://github.com/OWASP/java-html-sanitizer] 
which is clearly well maintianed, and turning to antisamy does not seem to be 
better for us.
{quote}
I actually got this CustomPolicy Class from the github project that you linked 
in one of your first comments:
{quote}I don't remember all about prepackaged policies from the top of my head 
and when looking for references from 
[https://github.com/OWASP/java-html-sanitizer] I got this
{quote}
This is the example class featured in the project: 
[https://github.com/OWASP/java-html-sanitizer/blob/master/src/main/java/org/owasp/html/examples/EbayPolicyExample.java]
 I just added some important things that were missing and were not violateble 
with cross scripting, including some HTML 5 elements, since they were not at 
all featured in this example.

I hope this helps, if there are any more questions, feel free to ask.


was (Author: dennis balkir):
Hi Jacques,

sorry for my late response, but I thought that you solved this for you after 
you wrote this comment.
{quote}Mmm, finally it's not as deprecated as I thought. Because [I looked at a 
fork|https://github.com/andresriancho/owaspantisamy] when I look at what I 
think it's the original I see it's maintained:
 [https://github.com/nahsra/antisamy]
 [https://github.com/nahsra/antisamy/issues/10]

Still we are actually using [https://github.com/OWASP/java-html-sanitizer] 
which is clearly well maintianed, and turning to antisamy does not seem to be 
better for us.
{quote}
I actuall got this CustomPolicy Class from the github project that you linked 
in one of your first comments:
{quote}I don't remember all about prepackaged policies from the top of my head 
and when looking for references from 
[https://github.com/OWASP/java-html-sanitizer] I got this
{quote}
This is the example class featured in the project: 
[https://github.com/OWASP/java-html-sanitizer/blob/master/src/main/java/org/owasp/html/examples/EbayPolicyExample.java]
 I just added some important things that were missing and were not violateble 
with cross scripting, including some HTML 5 elements, since they were not at 
all featured in this example.

I hope this helps, if there are any more questions, feel free to ask.

> OWASP sanitizer breaks proper rendering of HTML code
> 
>
> Key: OFBIZ-10187
> URL: https://issues.apache.org/jira/browse/OFBIZ-10187
> Project: OFBiz
>  Issue Type: Bug
>  Components: ALL COMPONENTS
>Affects Versions: Trunk, 16.11.04, Release Branch 17.12, Release Branch 
> 18.12
>Reporter: Michael Brohl
>Assignee: Michael Brohl
>Priority: Critical
>  Labels: backport-needed
> Fix For: 17.12.01, 16.11.06, 18.12.01
>
> Attachments: 
> OFBIZ-10187_Rewrite-CustomPermissivePolicy-matchesEithe.patch, 
> OFBIZ-10187_Sanitizer.patch, OFBIZ-10187_Sanitizer_16.11.patch, 
> OFBIZ-10187_Sanitizer_New.patch
>
>
> The current implementation of the sanitizer breaks the proper rendering of 
> html code. In our case, class attributes are stripped from the html content.
> Example:
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> will be rendered to
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, 

[jira] [Commented] (OFBIZ-10187) OWASP sanitizer breaks proper rendering of HTML code

2019-05-16 Thread Dennis Balkir (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10187?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841172#comment-16841172
 ] 

Dennis Balkir commented on OFBIZ-10187:
---

Hi Jacques,

sorry for my late response, but I thought that you solved this for you after 
you wrote this comment.
{quote}Mmm, finally it's not as deprecated as I thought. Because [I looked at a 
fork|https://github.com/andresriancho/owaspantisamy] when I look at what I 
think it's the original I see it's maintained:
 [https://github.com/nahsra/antisamy]
 [https://github.com/nahsra/antisamy/issues/10]

Still we are actually using [https://github.com/OWASP/java-html-sanitizer] 
which is clearly well maintianed, and turning to antisamy does not seem to be 
better for us.
{quote}
I actuall got this CustomPolicy Class from the github project that you linked 
in one of your first comments:
{quote}I don't remember all about prepackaged policies from the top of my head 
and when looking for references from 
[https://github.com/OWASP/java-html-sanitizer] I got this
{quote}
This is the example class featured in the project: 
[https://github.com/OWASP/java-html-sanitizer/blob/master/src/main/java/org/owasp/html/examples/EbayPolicyExample.java]
 I just added some important things that were missing and were not violateble 
with cross scripting, including some HTML 5 elements, since they were not at 
all featured in this example.

I hope this helps, if there are any more questions, feel free to ask.

> OWASP sanitizer breaks proper rendering of HTML code
> 
>
> Key: OFBIZ-10187
> URL: https://issues.apache.org/jira/browse/OFBIZ-10187
> Project: OFBiz
>  Issue Type: Bug
>  Components: ALL COMPONENTS
>Affects Versions: Trunk, 16.11.04, Release Branch 17.12, Release Branch 
> 18.12
>Reporter: Michael Brohl
>Assignee: Michael Brohl
>Priority: Critical
>  Labels: backport-needed
> Fix For: 17.12.01, 16.11.06, 18.12.01
>
> Attachments: 
> OFBIZ-10187_Rewrite-CustomPermissivePolicy-matchesEithe.patch, 
> OFBIZ-10187_Sanitizer.patch, OFBIZ-10187_Sanitizer_16.11.patch, 
> OFBIZ-10187_Sanitizer_New.patch
>
>
> The current implementation of the sanitizer breaks the proper rendering of 
> html code. In our case, class attributes are stripped from the html content.
> Example:
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> will be rendered to
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> I do not see any reason to not allow class attributes in html code. There 
> might be other problems with these rules but this is a showstopper.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (OFBIZ-10187) OWASP sanitizer breaks proper rendering of HTML code

2019-05-16 Thread Jacques Le Roux (JIRA)


[ 
https://issues.apache.org/jira/browse/OFBIZ-10187?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841159#comment-16841159
 ] 

Jacques Le Roux commented on OFBIZ-10187:
-

Hi [~mbrohl], [~Dennis Balkir]

Sorry to ask you again:
{quote}While working on OFBIZ-10054, I noticed that I think you somehow 
"translated" an antisamy xml example inspired by eBay to create 
CustomPermissivePolicy.java. Is that right?
 If yes, I believe you did so because the AntiSamy API has not been updated 
since 2013. Is that right too? I ask that because I believe it would be 
interesting to translate also the safer policy inspired by Slashdot and I'd 
like to know your experience, thanks.
{quote}
 

I'd like to know because I want something safer than a policy similar to eBay's 
to use in OFBIZ-5254

Thanks

> OWASP sanitizer breaks proper rendering of HTML code
> 
>
> Key: OFBIZ-10187
> URL: https://issues.apache.org/jira/browse/OFBIZ-10187
> Project: OFBiz
>  Issue Type: Bug
>  Components: ALL COMPONENTS
>Affects Versions: Trunk, 16.11.04, Release Branch 17.12, Release Branch 
> 18.12
>Reporter: Michael Brohl
>Assignee: Michael Brohl
>Priority: Critical
>  Labels: backport-needed
> Fix For: 17.12.01, 16.11.06, 18.12.01
>
> Attachments: 
> OFBIZ-10187_Rewrite-CustomPermissivePolicy-matchesEithe.patch, 
> OFBIZ-10187_Sanitizer.patch, OFBIZ-10187_Sanitizer_16.11.patch, 
> OFBIZ-10187_Sanitizer_New.patch
>
>
> The current implementation of the sanitizer breaks the proper rendering of 
> html code. In our case, class attributes are stripped from the html content.
> Example:
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> will be rendered to
> {code:java}
>     
>           src="<@ofbizContentUrl>/webcontent/img/slider/1.jpg" 
> alt="" />
>                  
>                      
>                          Lorem ipsum dolor sit amet
>                          At vero eos et accusam et justo
>                          
>                              Lorem ipsum dolor sit amet, consetetur 
> sadipscing elitr, dolores et ea rebum. Stet clita kasd gubergren, no sea
>                              takimata sanctus est Lorem ipsum dolor sit amet.
>                          
>                           href="<@ofbizUrl>cms/~webpage_id=100">weitere Informationen
>                      
>                  
>              {code}
> I do not see any reason to not allow class attributes in html code. There 
> might be other problems with these rules but this is a showstopper.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (OFBIZ-5254) Services allow arbitrary HTML for parameters with allow-html set to "safe"

2019-05-16 Thread Jacques Le Roux (JIRA)


 [ 
https://issues.apache.org/jira/browse/OFBIZ-5254?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jacques Le Roux updated OFBIZ-5254:
---
Priority: Critical  (was: Major)

> Services allow arbitrary HTML for parameters with allow-html set to "safe"
> --
>
> Key: OFBIZ-5254
> URL: https://issues.apache.org/jira/browse/OFBIZ-5254
> Project: OFBiz
>  Issue Type: Bug
>  Components: framework
>Affects Versions: Trunk
>Reporter: Christoph Neuroth
>Assignee: Jacques Le Roux
>Priority: Critical
>  Labels: security
> Attachments: OFBIZ-5254.patch
>
>
> For any given service with allow-html=safe parameters, the parameter data is 
> not properly validated. See Model.Service.java:588:
> {code}
> 
> StringUtil.checkStringForHtmlSafeOnly(modelParam.name, value, 
> errorMessageList);
> {code}
> Looking at that method:
> {code}
> public static String checkStringForHtmlSafeOnly(String valueName, String 
> value, List errorMessageList) {
> ValidationErrorList vel = new ValidationErrorList();
> value = defaultWebValidator.getValidSafeHTML(valueName, value, 
> Integer.MAX_VALUE, true, vel);
> errorMessageList.addAll(UtilGenerics.checkList(vel.errors(), 
> String.class));
> return value;
> }
> {code}
> you can see that it expects the defaultWebValidator.getValidSafeHTML would 
> add all validation errors to the given ValidationErrorList, but if you look 
> at the implementation of ESAPI that is not the case. First, consider the 
> overloaded getValidSafeHTML that takes the ValidationErrorList:
> {code}public String getValidSafeHTML(String context, String input, 
> int maxLength, boolean allowNull, ValidationErrorList errors) throws 
> IntrusionException {
>   try {
>   return getValidSafeHTML(context, input, maxLength, 
> allowNull);
>   } catch (ValidationException e) {
>   errors.addError(context, e);
>   }
>   return input;
>   }
> {code}
> Then, step into that method to see that ValidationExceptions are only thrown 
> for things like exceeding the maximum length - not for policy violations that 
> can be "cleaned", such as tags that are not allowed by the policy:
> {code}
>   AntiSamy as = new AntiSamy();
>   CleanResults test = as.scan(input, antiSamyPolicy);
>   List errors = test.getErrorMessages();
>   if ( errors.size() > 0 ) {
>   // just create new exception to get it logged 
> and intrusion detected
>   new ValidationException( "Invalid HTML input: 
> context=" + context, "Invalid HTML input: context=" + context + ", errors=" + 
> errors, context );
>   }
> {code}
> I guess that is an expected, although maybe not clearly documented behavior 
> of ESAPI: Non-cleanable violations throw the exception and therefore will 
> fail the ofbiz service, while non-allowed tags are cleaned. However, if you 
> consider ModelService:588 and following lines again:
> {code}
> StringUtil.checkStringForHtmlSafeOnly(modelParam.name, value, 
> errorMessageList);
> //(...)
> if (errorMessageList.size() > 0) {
> throw new ServiceValidationException(errorMessageList, this, 
> mode);
> }
> {code}
> the cleaned return value is ignored. Therefore, you will see an 
> "IntrusionDetection" in the logs, giving you a false sense of security but 
> the unfiltered HTML will still go into the service. So, if you want the 
> service to fail if non-allowed HTML is encountered, you should use 
> isValidSafeHTML instead. If you want the incoming HTML to be filtered, you 
> should use the return value of getValidSafeHTML.
> Some additional notes on this:
> * When changing this, it should be properly documented as users may well be 
> relying on this behavior - for example, we send full HTML mails to our 
> customers for their ecommerce purchases and require HTML to go through - so 
> maybe for services like the communicationEvents allowing only safe HTML might 
> not be desired.
> * The ESAPI code samples above are from version 1.4.4. I was really surprised 
> to find a JAR that is not only outdated, but patched and built by a third 
> party, without even indicating that in the filename in OfBiz trunk. This has 
> been there for years (see OFBIZ-3135) and should really be replaced with an 
> official, up to date version since that issue was fixed upstream years ago.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Created] (OFBIZ-11034) Have a Carrier dimension

2019-05-16 Thread Pierre Smits (JIRA)
Pierre Smits created OFBIZ-11034:


 Summary: Have a Carrier dimension
 Key: OFBIZ-11034
 URL: https://issues.apache.org/jira/browse/OFBIZ-11034
 Project: OFBiz
  Issue Type: Improvement
  Components: bi
Affects Versions: Trunk, Release Branch 17.12, Release Branch 18.12
Reporter: Pierre Smits
Assignee: Pierre Smits


The component would benefit from a Carrier dimension for future fact tables and 
star schema view entities.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)