Re: Proposal: Move towards developer friendly Ofbiz

2024-09-18 Thread Jacques Le Roux
Hi Groza, Inline... Le 18/09/2024 à 15:55, Groza Danut a écrit : Hi all, My proposal comes from my personal observations so far. I believe currently the 'customer' of the Ofbiz Project should be the developer, not the end user. I say this because of the following reasons: This is what someho

Re: (ofbiz-tools) branch master updated: Replaces 22.01 branch by 24.09 as stable

2024-09-12 Thread Jacques Le Roux
. I've removed the old demo-next log files. Thanks, Dan. On Wed, 11 Sept 2024 at 17:42, Jacques Le Roux wrote: Thanks to check Nicolas, With Docker, Dan has much simplified things. The BB script is also now easy to change*. If we did not miss anything, things happens as we know, as long a

Re: Unit testing for a custom module

2024-09-12 Thread Jacques Le Roux
Hi Carsten, I guess you found some explanations in "sourceSets{" ? HTH Jacques Le 11/09/2024 à 10:32, Carsten Schinzer a écrit : A little update here: This morning I found that when I place the integration tests in the main source tree they will not be executed in the JUnit run AND will be

[jira] [Commented] (OFBIZ-12828) Persist OrderItemAttributes of ShoppingCartItem in new entity ShoppingListItemAttributes along with persisted ShoppingCart (autoSaveList)

2024-09-11 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12828?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17881167#comment-17881167 ] Jacques Le Roux commented on OFBIZ-12828: - Oops, that stupid it's alre

[jira] [Reopened] (OFBIZ-12828) Persist OrderItemAttributes of ShoppingCartItem in new entity ShoppingListItemAttributes along with persisted ShoppingCart (autoSaveList)

2024-09-11 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12828?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux reopened OFBIZ-12828: - We now can easily backport in 24.09, reopening > Persist OrderItemAttributes

Re: (ofbiz-tools) branch master updated: Replaces 22.01 branch by 24.09 as stable

2024-09-11 Thread Jacques Le Roux
2d66d54ebb3f0b4eb922e9278b2c91422bdc81ce Author: Jacques Le Roux AuthorDate: Wed Sep 11 17:07:51 2024 +0200 Replaces 22.01 branch by 24.09 as stable --- demo-backup/ofbizdocker/home/ofbizdocker/demo-next/docker-compose.yml | 2 +-   1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/demo-backup

Re: Dependency configuration types in Gradle for components - testCompileOnly or testRuntimeOnly

2024-09-11 Thread Jacques Le Roux
that seem to the dependency config types that are recognized for plugins in OFBiz, right? Thanks again & warm regards Carsten Am 11.09.2024 um 08:36 schrieb Jacques Le Roux : Hi Carsten, Did you have a look at https://www.google.fr/search?q=gradle+testCompile&ie=UTF-8 ? Elese, &q

[jira] [Commented] (OFBIZ-12828) Persist OrderItemAttributes of ShoppingCartItem in new entity ShoppingListItemAttributes along with persisted ShoppingCart (autoSaveList)

2024-09-11 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12828?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17881041#comment-17881041 ] Jacques Le Roux commented on OFBIZ-12828: - Hi [~dtrunk90], Thanks for

[jira] [Closed] (OFBIZ-6709) When you add a party content the party profile screen does not refresh

2024-09-11 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-6709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux closed OFBIZ-6709. -- Fix Version/s: 18.12.17 (was: Upcoming Branch) Resolution: Fixed

[jira] [Created] (OFBIZ-13139) SecuredUpload, impossible to upload a text file in the "All" case

2024-09-11 Thread Jacques Le Roux (Jira)
Jacques Le Roux created OFBIZ-13139: --- Summary: SecuredUpload, impossible to upload a text file in the "All" case Key: OFBIZ-13139 URL: https://issues.apache.org/jira/browse/OFBIZ-13139

[jira] [Closed] (OFBIZ-13139) SecuredUpload, impossible to upload a text file in the "All" case

2024-09-10 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13139?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux closed OFBIZ-13139. --- Resolution: Fixed > SecuredUpload, impossible to upload a text file in the "A

Re: Dependency configuration types in Gradle for components - testCompileOnly or testRuntimeOnly

2024-09-10 Thread Jacques Le Roux
Hi Carsten, Did you have a look at https://www.google.fr/search?q=gradle+testCompile&ie=UTF-8 ? Elese, "testRuntime is deprecated since many years and removed since Gradle 7" : https://discuss.gradle.org/t/documentation-of-dependency-configuration-testruntime/46219 HTH Jacques Le 10/09/202

Re: GeoAssoc id and idTo

2024-09-10 Thread Jacques Le Roux
Hi Groza, Good quesiton, it's rather GeoAssoc definitions that are reversed. This was done 13 years ago by https://svn.apache.org/viewvc?view=revision&revision=1162940 (text changed

[jira] (OFBIZ-12639) Upload image size issue

2024-09-10 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12639 ] Jacques Le Roux deleted comment on OFBIZ-12639: - was (Author: jira-bot): Commit 90d557844f5c7dccb328f996f444d9eab021f50a in ofbiz-framework's branch refs/heads/trunk from Groza

[jira] [Commented] (OFBIZ-6709) When you add a party content the party profile screen does not refresh

2024-09-10 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-6709?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17880558#comment-17880558 ] Jacques Le Roux commented on OFBIZ-6709: Ha no, forgot that we have to kno

[jira] [Reopened] (OFBIZ-6709) When you add a party content the party profile screen does not refresh

2024-09-10 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-6709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux reopened OFBIZ-6709: Reopening, because there is a problem showing the result of upload either if it's reject

[jira] [Closed] (OFBIZ-12639) Upload image size issue

2024-09-10 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12639?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux closed OFBIZ-12639. --- Fix Version/s: 18.12.17 Assignee: Jacques Le Roux Resolution: Fixed I

[jira] [Commented] (OFBIZ-12639) Upload image size issue

2024-09-10 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12639?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17880515#comment-17880515 ] Jacques Le Roux commented on OFBIZ-12639: - Please [~iwolf] , if you g

[jira] [Commented] (OFBIZ-12639) Upload image size issue

2024-09-10 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12639?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17880514#comment-17880514 ] Jacques Le Roux commented on OFBIZ-12639: - Hi, As mentioned at [h

Re: Bug when uploading image to a product

2024-09-09 Thread Jacques Le Roux
Le 09/09/2024 à 18:59, Jacques Le Roux a écrit : i wonder why even admin lack some permission, It's because webshell uploads are devastating. They easily lead to RCE. If for some reason we face a post-authN attack, we can't trust any authentication. And SecuredUpload is already enou

Re: refused

2024-09-09 Thread Jacques Le Roux
I did not find any advice about that. TIA Jacques Le 09/09/2024 à 16:16, sebb a écrit : On Mon, 9 Sept 2024 at 11:36, Jacques Le Roux wrote: Hi, After creating a new file usinghttps://projects.apache.org/create.html (DOAP Creation), I merged the changes got in to update our previous doap_OFB

Re: Bug when uploading image to a product

2024-09-09 Thread Jacques Le Roux
free to work on it with the suggestions you made which seem great. I have seen, and tested a bit (with some "attacking" images), your PR834. It sounds OK with me. Before pushing I'll though see if we can't handle the "All" case using isValidImageIncludingSvgFile() Than

[jira] [Closed] (OFBIZ-12172) Remove CommunicationContent is not working as expected

2024-09-09 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12172?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux closed OFBIZ-12172. --- Fix Version/s: 18.12.17 Resolution: Fixed > Remove CommunicationContent is

[jira] [Created] (OFBIZ-13137) Reject reviewed "Communication Event ID DEMO-COM-BACKLOG-1" is impossible

2024-09-09 Thread Jacques Le Roux (Jira)
Jacques Le Roux created OFBIZ-13137: --- Summary: Reject reviewed "Communication Event ID DEMO-COM-BACKLOG-1" is impossible Key: OFBIZ-13137 URL: https://issues.apache.org/jira/browse/O

Re: want to be apache contributor

2024-09-09 Thread Jacques Le Roux
Hi Lucille, It's done Have a good day Jacques Le 05/09/2024 à 11:27, Jacques Le Roux a écrit : Hi Lucille, We are sorry for your loss, I'll take care of that. Jacques Le 04/09/2024 à 21:25, Sales Vibralung a écrit : Hi all, My late husband was a Linux wiz.  How can I get

[jira] [Commented] (OFBIZ-12263) Cannot compile plugins with dependencies in other repositories - clojars repo

2024-09-09 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12263?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17880217#comment-17880217 ] Jacques Le Roux commented on OFBIZ-12263: - Thanks for the feeedback E

Re: Bug when uploading image to a product

2024-09-08 Thread Jacques Le Roux
BTW, there is already a Jira for that: https://issues.apache.org/jira/browse/OFBIZ-12639 Any help is welcome :) Le 08/09/2024 à 17:03, Jacques Le Roux a écrit : Hi Groza, After facing several webshell uploads I made SecuredUpload.java as secure as possible OOTB. I see 2 options here

[jira] [Commented] (OFBIZ-9832) Provide ability for OFBiz to publish plugins to Nexus maven repository

2024-09-08 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-9832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17880170#comment-17880170 ] Jacques Le Roux commented on OFBIZ-9832: Hi [~taher], Any news here,

[jira] [Closed] (OFBIZ-12984) CreateFacilityLocation throws an error

2024-09-08 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12984?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux closed OFBIZ-12984. --- Fix Version/s: Upcoming Branch Assignee: Jacques Le Roux Resolution: Fixed

Re: [VOTE] [BRANCH] Create next stable Apache OFBiz branch : release24.09

2024-09-08 Thread Jacques Le Roux
+1 Jacques Le 08/09/2024 à 18:01, Jacopo Cappellato a écrit : +1 Jacopo On Fri, Sep 6, 2024 at 2:28 PM Nicolas Malin wrote: This is the vote thread to create the next stable branch "release24.09" from the current trunk If you need more information, please refer to this thread [1] Vote: [

[jira] [Closed] (OFBIZ-13136) Logout may create a "HTTP Status 500 - Internal Server Error"

2024-09-08 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13136?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux closed OFBIZ-13136. --- Fix Version/s: 18.12.17 Resolution: Fixed > Logout may create a "HTTP St

Re: Bug when uploading image to a product

2024-09-08 Thread Jacques Le Roux
Hi Groza, After facing several webshell uploads I made SecuredUpload.java as secure as possible OOTB. I see 2 options here: * Increase maxLineLength in security.properties (could be unsecure, but not that bad) * Improve SecuredUpload by having a special treatment for Images at line 209 HTH

[jira] [Commented] (OFBIZ-13114) Afterlogin events are called during logout

2024-09-08 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13114?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17880125#comment-17880125 ] Jacques Le Roux commented on OFBIZ-13114: - Hi [~mbrohl], [~cshan], Thi

Re: 回复:Re: 回复:Re: 回复:Re: ofibz causes system extremely slow after one night

2024-09-08 Thread Jacques Le Roux
Protocols add domain framework/security/config/security.properties host-headers-allowed add domain framework/base/config/cache.properties rm as the comment is 1 core 2 GB memeroy os sufficient? I rarely operate the website and just let it stay there... Regards, Yang 原始邮件 发件人:"Jacqu

Re: 回复:Re: 回复:URL Issue

2024-09-08 Thread Jacques Le Roux
tart (before signing in) or during the session. That no longer happens in trunk for both cases. Please test, TIA Jacques Le 07/09/2024 à 18:01, Jacques Le Roux a écrit : Hi, Thanks All for your help. Here is the origin and the fix of this issue. The official documentation about @WebListener i

Re: Consultation for new plugin

2024-09-07 Thread Jacques Le Roux
Hi Groza, You need a Confluence write access. Have you created a Confluence account? If you did, what is your Confluence username? HTH Jacques Le 07/09/2024 à 19:05, Groza Danut a écrit : I propose we move the requirement planning and architectural design draft in a new temporary page on Con

Re: 回复:Re: 回复:URL Issue

2024-09-07 Thread Jacques Le Roux
13136 for that and will push now Jacques Le 06/09/2024 à 14:50, Jacques Le Roux a écrit : Thanks Groza, I have an idea about that, I'll check it does not introduce a regression Le 06/09/2024 à 11:29, Groza Danut a écrit : Yes it is, the line at 168 removes the char: .replaceAll(";

Re: 回复:Re: 回复:URL Issue

2024-09-06 Thread Jacques Le Roux
he.ofbiz.webapp.control.ControlFilter.doFilter(ControlFilter.java:172) javax.servlet.http.HttpFilter.doFilter(HttpFilter.java:53) org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71) Note The full stack trace of the root cause is available in the server logs. Apache Tomcat/9.0.91

Re: 回复:Re: 回复:Re: ofibz causes system extremely slow after one night

2024-09-06 Thread Jacques Le Roux
more few days. 原始邮件 发件人:"Jacques Le Roux"< jacques.le.r...@les7arts.com >; 发件时间:2024/9/4 15:36 收件人:"dev"< dev@ofbiz.apache.org >;"雷咩咩"< 675686...@qq.com.INVALID >;"ofbiz user"< u...@ofbiz.apache.org &g

Re: want to be apache contributor

2024-09-05 Thread Jacques Le Roux
ed on that page. I can review your changes if you like... Warm regards, Craig > On Sep 3, 2024, at 23:34, Jacques Le Roux wrote: > > Thanks Craig, > > This page was written before the GitHub "era". I think we should rewrite it a bit in accorda

[jira] [Updated] (OFBIZ-13130) [CVE-2024-45195] Add permission check for view-maps and change defaults for request-maps

2024-09-05 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13130?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux updated OFBIZ-13130: Summary: [CVE-2024-45195] Add permission check for view-maps and change defaults for

[jira] [Updated] (OFBIZ-13130) Add permission check for view-maps and change defaults for request-maps

2024-09-04 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13130?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux updated OFBIZ-13130: Parent: OFBIZ-1525 Issue Type: Sub-task (was: Improvement) > Add permiss

Re: want to be apache contributor

2024-09-04 Thread Jacques Le Roux
Hi, Not "pas" but "page" of course. I'll rewrite few parts. Jacques Le 04/09/2024 à 08:34, Jacques Le Roux a écrit : Thanks Craig, This pas was written before the GitHub "era". I think we should rewrite it a bit in accordance with what you said. Ja

Re: 回复:Re: ofibz causes system extremely slow after one night

2024-09-04 Thread Jacques Le Roux
an proceed like this? Regards, Yang 原始邮件 发件人:"Jacques Le Roux"< jacques.le.r...@les7arts.com >; 发件时间:2024/9/4 14:36 收件人:"dev"< d...@ofbiz.apache.org >; 主题:Re: ofibz causes system extre

Re: What is the status of the BIRT plugin?

2024-09-03 Thread Jacques Le Roux
Hi Groza, I suggest to have a look at: https://lists.apache.org/list?user@ofbiz.apache.org:gte=1d:birt%20plugin https://lists.apache.org/list?user@ofbiz.apache.org:gte=1d:birt%20security Summary: as long as you don't create reports yourself there is no problems with Birt in OFBiz as it's OOTB s

[oss-security] CVE-2024-45507: Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE

2024-09-03 Thread Jacques Le Roux
Severity: important Affected versions: - Apache OFBiz before 18.12.16 Description: Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade t

[oss-security] CVE-2024-45195: Apache OFBiz: Confused controller-view authorization logic (forced browsing)

2024-09-03 Thread Jacques Le Roux
Severity: important Affected versions: - Apache OFBiz before 18.12.16 Description: Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue. Credit: shin24

CVE-2024-45507: Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE

2024-09-03 Thread Jacques Le Roux
Severity: important Affected versions: - Apache OFBiz before 18.12.16 Description: Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade t

CVE-2024-45507: Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE

2024-09-03 Thread Jacques Le Roux
Severity: important Affected versions: - Apache OFBiz before 18.12.16 Description: Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade t

CVE-2024-45195: Apache OFBiz: Confused controller-view authorization logic (forced browsing)

2024-09-03 Thread Jacques Le Roux
Severity: important Affected versions: - Apache OFBiz before 18.12.16 Description: Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue. Credit: shin24

CVE-2024-45195: Apache OFBiz: Confused controller-view authorization logic (forced browsing)

2024-09-03 Thread Jacques Le Roux
Severity: important Affected versions: - Apache OFBiz before 18.12.16 Description: Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue. Credit: shin24

[jira] [Closed] (OFBIZ-12978) CONTENT- Move from hard-coded menu location to parameterized

2024-09-03 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12978?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux closed OFBIZ-12978. --- Resolution: Abandoned > CONTENT- Move from hard-coded menu location to parameteri

Re: [PROPOSAL] freeze trunk for new features in favor of a release 24.x branch preparation / future roadmap

2024-09-03 Thread Jacques Le Roux
+1 Sounds good, thanks Jacques Le 03/09/2024 à 17:32, gil a écrit : +1 Thanks, Gil On 03/09/2024 15:21, Nicolas Malin wrote: Hello, After going through this thread [1], I propose to go ahead with the creation of the `release24` branch in a few weeks, and the release of the next official v

[jira] [Updated] (OFBIZ-13121) Keep the Gradle Owasp dependencycheck task

2024-09-03 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13121?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux updated OFBIZ-13121: Summary: Keep the Gradle Owasp dependencycheck task (was: Abandon the Gradle Owasp

[jira] [Commented] (OFBIZ-13121) Abandon the Gradle Owasp dependencycheck task

2024-09-03 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13121?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17878786#comment-17878786 ] Jacques Le Roux commented on OFBIZ-13121: - Thanks for the release ver

Re: Want to be a committer , ICLA filled

2024-09-02 Thread Jacques Le Roux
Hi Omar, We note that. Note on your side that it's the PMC to decide who should be a commiter. https://community.apache.org/contributors/becomingacommitter.html Thanks for your interest in OFBiz and keep it Jacques Le 02/09/2024 à 12:51, Omar Abdullwahhab a écrit : Hello developers at Ofbiz

Re: 回复:unauthorized SSRF and RCE vulnerability for Apache OFBiz under 18.12.16

2024-09-02 Thread Jacques Le Roux
Sure thing, thanks for the feedback Le 02/09/2024 à 09:17, sunxiang0...@163.com a écrit : it's ok,credit just 孙相(Sun Xiang) 发自我的手机 原始邮件 发件人: Jacques Le Roux 日期: 2024年9月2日周一 下午2:51 收件人: secur...@ofbiz.apache.org, 孙相,0386 主 题: Re: unauthorized SSRF an

Re: 回复: 回复:Re: want to be apache contributor

2024-09-01 Thread Jacques Le Roux
ement committee privately atpriv...@ofbiz.apache.org. If the project is still unable to respond, you can then escalate the matter to the ASF Infrastructure team atus...@infra.apache.org > > > > > Regards, > Yang > > > > > > >     > 原始

Re: Attribute 'auth' is not allowed to appear in element 'view-map' for ecommerce plugin

2024-09-01 Thread Jacques Le Roux
Hi Yang, I'm not quite sure why you get that. It's not a big deal, has no other effects than this information in log. It's due to inconsistency with your code and http://ofbiz.apache.org/dtds/site-conf.xsd As you can see, it has been changed last week: https://github.com/apache/ofbiz-site/bl

Re: 回复:Re: want to be apache contributor

2024-09-01 Thread Jacques Le Roux
the project is still unable to respond, you can then escalate the matter to the ASF Infrastructure team atus...@infra.apache.org Regards, Yang 原始邮件 发件人:"Jacques Le Roux"https://issues.apache.org/jira/brows

Re: want to be apache contributor

2024-08-31 Thread Jacques Le Roux
Here is the solution: https://issues.apache.org/jira/browse/INFRA-26082 Le 31/08/2024 à 16:09, Jacques Le Roux a écrit : Wait Yang, All documentation is useful ;) The problem is to maintained it... Le 31/08/2024 à 16:01, 雷咩咩 a écrit : hi Jacques, I had created account in atlassian and can

Re: 回复:URL Issue

2024-08-31 Thread Jacques Le Roux
1:42 +0300] "GET /rainbowstone/RAINBOWSTONE_SAPHIR.less HTTP/2.0" 200 1560 " https://localhost:8443/facility/control/FindFacility"; "Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0" 127.0.0.1 - - [26/Aug/2024:20:51:42 +0300] "GET /facility/contr

Re: want to be apache contributor

2024-08-31 Thread Jacques Le Roux
ards, Yang Original Email From:"Jacques Le Roux"< jacques.le.r...@les7arts.com >; Sent Time:2024/8/31 21:35 To:"雷咩咩"< 675686...@qq.com >;"user@ofbiz.apache.org"< user@ofbiz.ap

Re: want to be apache contributor

2024-08-31 Thread Jacques Le Roux
h Infra (things change quickly) Jacques Le 31/08/2024 à 10:13, Jacques Le Roux a écrit : Hi Yang, You need to create a Confluence account (Jira ans Confluence are separated) with one email that works there (maybe .invalid will not) and tell us the Confluence Id you choose (the email is easier

Re: 回复:URL Issue

2024-08-31 Thread Jacques Le Roux
27.0.0.1 - - [26/Aug/2024:20:51:42 +0300] "GET /facility/control/FindFacility HTTP/2.0" 200 4274 " https://localhost:8443/facility/control/main?externalLoginKey=ELf5b96d38-f415-4bdf-94d4-7666a2445a03"; "Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0&

Re: 回复:URL Issue

2024-08-31 Thread Jacques Le Roux
rol/WebAppServletContextListener.java#L41>) It seems to be that this listener is never registered , so that it has no effect. Note that its annotated with @WebListener So confirm that I am correct, or wrong. Regards On Fri, Aug 30, 2024 at 6:30 PM Jacques Le Roux < jacques.le.r...@les7arts.com> wrote: H

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.16 - Second attempt

2024-08-31 Thread Jacques Le Roux
Thanks Jacopo, Verification, back and front ends (small checks) work for me. Ubuntu 20.04 LTS openjdk version "1.8.0_422" +1 Jacques Le 31/08/2024 à 08:46, Jacopo Cappellato a écrit : This is the second vote thread to publish "Apache OFBiz 18.12.16", the 16th release from the release18.12 br

Re: want to be apache contributor

2024-08-31 Thread Jacques Le Roux
Hi Yang, You need to create a Confluence account (Jira ans Confluence are separated) with one email that works there (maybe .invalid will not) and tell us the Confluence Id you choose (the email is easier I guess, but that's up to you) Something has changed (temporarily I hope) in Confluence,

Re: 回复:URL Issue

2024-08-30 Thread Jacques Le Roux
e reason yet. If you could confirm that it's not reproductible but in demo server that would help to restrain the possibilities TIA Jacques Le 29/08/2024 à 10:17, Jacques Le Roux a écrit : Hi, Finally it's not that clear. As can be found in trunk demo access_logs, such URLs exist at least

Re: 回复:Re: 回复: configured jks certificate but browser said insecure

2024-08-29 Thread Jacques Le Roux
ang 原始邮件 发件人:"Jacques Le Roux"< jacques.le.r...@les7arts.com >; 发件时间:2024/8/29 22:24 收件人:"user"< user@ofbiz.apache.org >; 主题:Re: 回复: configured jks certificate but browser said insecure

Re: 回复:URL Issue

2024-08-29 Thread Jacques Le Roux
s at configuring the applications with the names of their session cookies. All the back-end applications could then use a single 'backend' cookie, and any front-end consumer facing application could have their own distinct session cookie. Thanks, Dan. On Thu, 29 Aug 2024 at 09:17, Jacques Le Ro

Re: Product configuration

2024-08-29 Thread Jacques Le Roux
e don't have product information(how many sqm per box there are for this model) so I cannot directly convert between sqm to box using just the conversion factor. Groza Danut On Wed, Aug 28, 2024 at 4:59 PM Jacques Le Roux < jacques.le.r...@les7arts.com> wrote: Hi Groza, Have you been ab

Re: 回复: configured jks certificate but browser said insecure

2024-08-29 Thread Jacques Le Roux
Original Email From:"Jacques Le Roux"https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors Jacques Le 29/08/2024 à 03:22, 雷咩咩 a écrit : > I think I can add my steps to set it up in the confluence wiki, if you'd > like Apache

Re: 回复:URL Issue

2024-08-29 Thread Jacques Le Roux
"Prevent special encoded characters sequences in URLs" So we need to clearly define steps to manually generate these URLs. Then, if it's OK, we could allow URLs containing ";jsessionid=" to bypass the security filter. I copy this email to the dev ML because of its impo

Re: 回复:URL Issue

2024-08-29 Thread Jacques Le Roux
"Prevent special encoded characters sequences in URLs" So we need to clearly define steps to manually generate these URLs. Then, if it's OK, we could allow URLs containing ";jsessionid=" to bypass the security filter. I copy this email to the dev ML because of its impo

Re: Please test/review 2.3.34-SNAPSHOT

2024-08-29 Thread Jacques Le Roux
's OK with me to release 2.3.34 Jacques Le 22/08/2024 à 08:40, Jacques Le Roux a écrit : Ah, I did not know that. Then we can backport. I'll not it in the Jira. Thanks Le 21/08/2024 à 23:34, Daniel Dekany a écrit : OK, thanks! I'm not getting why the Java version is relevant t

Re: 回复: configured jks certificate but browser said insecure

2024-08-28 Thread Jacques Le Roux
Hi Yang, Yes please, are you already a Confluence contributor? https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors Jacques Le 29/08/2024 à 03:22, 雷咩咩 a écrit : I think I can add my steps to set it up in the confluence wiki, if you'd like Apache OFBiz Technical Produc

Re: configured jks certificate but browser said insecure

2024-08-28 Thread Jacques Le Roux
Hi Yang, You should have a look at https://letsencrypt.org/zh-cn/ HTH Jacques Le 28/08/2024 à 17:30, 雷咩咩 a écrit : hi ofbiz users, I've successfully started ofbiz and reverse proxied by nginx, can visit by https://leiyang.icu/accounting/control/login. However, as I also have other websi

Re: First pull request

2024-08-28 Thread Jacques Le Roux
Hi, You should be able to get to this link without any specific privileges. Jacques Le 26/08/2024 à 16:26, 雷咩咩 a écrit : Hi I'm new user too but seems you missed the link?  https://github.com/apache/ofbiz-plugins/pull/127/commits/9186a4527300cbc8bd4e6b76325925e0b52b62b8 and maybe need add d

Re: Contribution to ecommerce labels

2024-08-28 Thread Jacques Le Roux
Hi Tomislav, I have added a note about your tool in https://cwiki.apache.org/confluence/display/OFBIZ/Text+Translation https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=199533364 Thanks ! Jacques Le 22/08/2024 à 08:46, Jacques Le Roux a écrit : Hi Tomislav, Thanks so much, I

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.16

2024-08-28 Thread Jacques Le Roux
Thanks Jacopo, Verification, back and front ends (small checks) work for me Ubuntu 20.04 LTS under Oracle VM virtualBox Version 7.0.6 r155176 (Qt5.15.2) on Windows 7 (yes! :) openjdk version "1.8.0_422" OpenJDK Runtime Environment (build 1.8.0_422-8u422-b05-1~20.04-b05) OpenJDK 64-Bit Server VM

Re: Product configuration

2024-08-28 Thread Jacques Le Roux
Hi Groza, Have you been able to find the solution by your one? There is some related discussions in user ML. Jacques Le 11/08/2024 à 09:29, Groza Danut a écrit : Hello all, Sorry if this is a too basic question, but I have a product configuration I don't know how to model in Ofbiz. I have a

Re: 回复:URL Issue

2024-08-28 Thread Jacques Le Roux
Thanks Guys, I could not reproduce yet, but I think we have already enough clues to fix that. Also I can find a lot of in trunk demo log. That will be helpful too. Jacques Le 27/08/2024 à 16:20, 雷咩咩 a écrit : i can reproduce by login with admin, randomly click severl places, then when click l

Re: Want to register as Contributor

2024-08-27 Thread Jacques Le Roux
Hi Srinivas, Your message has been moderated, else it would not have reached this Mailing List. Please subscribe to the user ML and then use your email client. See why here http://ofbiz.apache.org/mailing-lists.html. You will get a better support, people can answer you on the ML. The wider the

Re: First pull request

2024-08-27 Thread Jacques Le Roux
Hi Groza, Thanks for your contribution. I just pushed it after checking that the form what OK (I can't really verify Romanian but translated 2 or 3 long sentences ;) We did not receive confirmation for documentation contribution from Tomislav but as it does not need an ICLA I'll put itin documen

Re: how to enable login account

2024-08-25 Thread Jacques Le Roux
nk? Original Email From:"Jacques Le Roux"< jacques.le.r...@les7arts.com >; Sent Time:2024/8/25 18:09 To:"675686066"< 675686...@qq.com >; Subject:Re: how to enable login account Hi 雷咩咩, You must have made a wrong association between demoCustomer and his securi

Re: how to enable login account

2024-08-25 Thread Jacques Le Roux
Hi 雷咩咩, You must have made a wrong association between demoCustomer and his security group Jacques Le 25/08/2024 à 03:05, 雷咩咩 a écrit : but then by the democustomer account i can modify the login password of admin. how can that be? anyone can explain? currently the democustomer password is 'p

Re: Contribution to ecommerce labels

2024-08-21 Thread Jacques Le Roux
Hi Tomislav, Thanks so much, I was not aware of this tools. Would you mind putting this information in OFBiz documentation? TIA Jacques Le 21/08/2024 à 17:58, Tomislav Preksavec a écrit : Hi Groza, actually I made a tool for OfBiz labels translation a few years ago. It's a python3 script, i

[jira] [Commented] (OFBIZ-13131) Test 2.3.34 FreeMarker release

2024-08-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13131?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17875751#comment-17875751 ] Jacques Le Roux commented on OFBIZ-13131: - In the above thread Daniel

Re: Please test/review 2.3.34-SNAPSHOT

2024-08-21 Thread Jacques Le Roux
he related directories inside META-INF, so we are also Java 8 compatible.) On Wed, Aug 21, 2024 at 10:17 AM Jacques Le Roux < jacques.le.r...@les7arts.com> wrote: Le 19/08/2024 à 14:01, Daniel Dekany a écrit : While we have not much changes accumulated yet, the tooling related issues with 2.3.3

[jira] [Commented] (OFBIZ-13131) Test 2.3.34 FreeMarker release

2024-08-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13131?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17875403#comment-17875403 ] Jacques Le Roux commented on OFBIZ-13131: - I have informed Freemarker: h

Re: Please test/review 2.3.34-SNAPSHOT

2024-08-21 Thread Jacques Le Roux
Le 19/08/2024 à 14:01, Daniel Dekany a écrit : While we have not much changes accumulated yet, the tooling related issues with 2.3.33 freemarker.jar (see below) warrants an urgent release. The current change log of 2.3.34 is this: https://freemarker.apache.org/builds/2.3.34-SNAPSHOT/_html/versio

[jira] [Commented] (OFBIZ-12935) Test 2.3.33 FreeMarker release

2024-08-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12935?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17875399#comment-17875399 ] Jacques Le Roux commented on OFBIZ-12935: - Hi Dániel, Nope, this one wa

[jira] [Updated] (OFBIZ-13130) Add permission check for view-maps and change defaults for request-maps

2024-08-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13130?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux updated OFBIZ-13130: Component/s: ALL COMPONENTS > Add permission check for view-maps and change defaults

[jira] [Updated] (OFBIZ-13130) Add permission check for view-maps and change defaults for request-maps

2024-08-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13130?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux updated OFBIZ-13130: Component/s: (was: ALL COMPONENTS) Fix Version/s: 18.12.16 Affects

[jira] [Commented] (OFBIZ-12935) Test 2.3.33 FreeMarker release

2024-08-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12935?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17875385#comment-17875385 ] Jacques Le Roux commented on OFBIZ-12935: - I unintentionally deleted all

[jira] (OFBIZ-12935) Test 2.3.33 FreeMarker release

2024-08-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12935 ] Jacques Le Roux deleted comment on OFBIZ-12935: - was (Author: jacques.le.roux): I only crossed an issue with Eclipse editing in FreeMarkerWorker.java where import of

[jira] (OFBIZ-12935) Test 2.3.33 FreeMarker release

2024-08-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-12935 ] Jacques Le Roux deleted comment on OFBIZ-12935: - was (Author: jacques.le.roux): It seems to work locally, I commit in trunk. > Test 2.3.33 FreeMarker rele

[jira] [Commented] (OFBIZ-13131) Test 2.3.34 FreeMarker release

2024-08-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13131?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17875384#comment-17875384 ] Jacques Le Roux commented on OFBIZ-13131: - I only crossed an issue with Ecl

[jira] [Updated] (OFBIZ-13131) Test 2.3.34 FreeMarker release

2024-08-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-13131?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux updated OFBIZ-13131: Description: It's intended to test the 2.3.34 FreeMarker releases [as requested b

  1   2   3   4   5   6   7   8   9   10   >