Should be fixed at revision 760363.

Thanks for report

Jacques

From: "aswath narayana" <[email protected]>
Hello,
I was working on ProjectMgr module on my localcopy r759268
* Opened the DemoProj1 -cust1 project
* I added a task - b1
* I clicked on the TimeSheet.
* I Clicked on the New timesheet
* PartyID  = The Administrator.  and then click on Add
* I selected the b1 task, I just added
* Entered 10 hrs for Monday
* Selected the checkbox complete
* Then, clicked on the update button.

Everything is fine.  Now, I click on 'Status to Complete'.

The Following Errors Occurred:

Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
parameter [timesheetId] passed to secure (https) request-map with uri
[TimeSheetStatusToComplete] with an event that calls service
[updateTimesheet]; this is not allowed for security reasons! The data should
be encrypted by making it part of the request body (a form field) instead of
the request URL.

-Aswath


Reply via email to