Okay, in rev 755032 it is technically "fixed".

The error is still not turned on, but this will avoid the log warning message, and handle it in the future when the strict error is turned back on.

-David


On Mar 11, 2009, at 11:14 AM, David E Jones wrote:


Technically it's not "fixed", but the framework now only logs a warning instead of completely disallowing it.

Once we have more time to correct a bunch of these issues this constraint will be going back in, and this link (along with many others) will need to be changed to a form so the parameters are protected.

-David


On Mar 11, 2009, at 3:30 AM, Jacques Le Roux wrote:

Hi Sharan,

Could you retry with an updated version please. This should have been fixed since r752399

Thanks

Jacques

From: "Sharan-F" <[email protected]>
Hi
I've been doing some testing on the latest Hotwax Demo in Accounting and
have just come across this error message:
The Following Errors Occurred:
Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [customTimePeriodId] passed to secure (https) request- map with uri
[closeFinancialTimePeriod] with an event that calls service
[closeFinancialTimePeriod]; this is not allowed for security reasons!
Steps to re-create the message is as follows:
1. Login as admin
2.  Go to Accounting / General Ledger
3. Then select 'Setup 'for Company
4. Then Select Time Period
5. I then pressed the 'Close' button for time period 6001 (which is demo
data and relates to 2007) and this error message appears.
I did check to see and there were no existing accounting transactions at all that were related to any of the time periods. Does anyone know if something has changed in the security setup that now disallows this type of process?
Thanks
Sharan
--
View this message in context: 
http://www.nabble.com/Error-Message-trying-to-Close-an-unused-Time-Period-tp22448514p22448514.html
Sent from the OFBiz - User mailing list archive at Nabble.com.




Reply via email to