Bug Tracker Incident #16225

 


Summary
Project
INCDT - xTuple ERP
Incident Category
Bugs
Incident Number
16225
Visibility
public


Product Version
3.8.0Beta2
Fixed In Version
4.0.0


Summary
*It is possible to create a ToDo item even after revoking 'MaintainAllToDoItems' and 'MaintainPersonalTodoItems' privilege


Description

ToDo item can be created even after revoking 'MaintainAllToDoItems' and 'MaintainPersonalToDoItems' privilege`

Steps to Reproduce:
Pre-Condition:

Ensure that 'MaintainAllToDoItems' and 'MaintainPersonalToDoItems' privileges of CRM module are revoked

1. CRM-To Do-List
2. Observe that 'ToDoItem' menu is disabled in drop down list of New button
3. Click 'New' button or press 'Ctrl + N' keys
4. Observe that to do item screen is displayed and to do item can be created


Details
Reporter
nagesh
CRM Account
ZenQA
Status
Closed
Assigned
reddog


Priority
Normal
Severity
Minor
Updated
04-11-13 16:59
Resolution
Fixed



Comments

DateUsernameComment
12/10/12 14:07schurch

Tested okay in 4.0.0 master ref database

11/30/12 11:36reddog

change window todoList and add a priv check to the sNew method. this window is a subclass of the display class and the display class was triggering the New shortcut key.

11/30/12 11:34svn

Revision: 14280
http://postbooks.svn.sourceforge.net/postbooks/?rev=14280&view=rev
Author: sunsetsolutions
Date: 2012-11-30 16:34:17 +0000 (Fri, 30 Nov 2012)
Log Message:
-----------
Issue #16225:additional priv check in sNew due to display trigger

Modified Paths:
--------------
xtuple/trunk/guiclient/todoList.cpp

11/02/12 06:44shyamsunder

Tested in xTuple version 4.0.0 Beta3: Issue is still existing

10/17/12 16:06svn

Revision: 14185
http://postbooks.svn.sourceforge.net/postbooks/?rev=14185&view=rev
Author: mikeodonnell
Date: 2012-10-17 20:06:28 +0000 (Wed, 17 Oct 2012)
Log Message:
-----------
Bug #16225 - bug needed further fixing. Fixed a problem where users
without the proper privs could still create a new to-do item using a
keyboard shortcut.

Modified Paths:
--------------
xtuple/trunk/guiclient/todoList.cpp

10/16/12 11:37schurch

Re-opening. The new button is greyed out however typing CTRL N still brings up to do list screen. Still able to create to-dos that way.

08/15/12 16:02svn

Revision: 13973
http://postbooks.svn.sourceforge.net/postbooks/?rev=13973&view=rev
Author: mikeodonnell
Date: 2012-08-15 20:02:31 +0000 (Wed, 15 Aug 2012)
Log Message:
-----------
Bug #16225 - fixed issues where users would surpass MaintainAllToDoItems
and MaintainPersonalToDoItems privileges

Modified Paths:
--------------
xtuple/trunk/guiclient/todoItem.cpp
xtuple/trunk/guiclient/todoList.cpp

11/21/11 15:52mmcbride

confirmed in 380b2

11/16/11 02:07nagesh

ToDo item can be created even after revoking 'MaintainAllToDoItems' and 'MaintainPersonalToDoItems' privilege`

Steps to Reproduce:
Pre-Condition:

Ensure that 'MaintainAllToDoItems' and 'MaintainPersonalToDoItems' privileges of CRM module are revoked

1. CRM-To Do-List
2. Observe that 'ToDoItem' menu is disabled in drop down list of New button
3. Click 'New' button or press 'Ctrl + N' keys
4. Observe that to do item screen is displayed and to do item can be created



Characteristics

Backport
No
CodeReview
Needed
Operating System
all
Doc Flag
False
Regression
No
BugHunt2012
yes
Copyright Assigned
Yes
HaxTuple
No
Points
None

Files

No Files

Related Documents

TypeNumberDescriptionRelationshipRemove
ProjectXTUPLEAPPSPorted From Mantisx


Subscribers

You do not have permission to view subscribers.


Incident History

DateUsernameFieldChange
11/16/11 02:07nageshNewIncident Added
11/16/11 02:07nageshCharacteristic Backport Added: "No"
11/16/11 02:07nageshCharacteristic CodeReview Added: ""
11/16/11 02:07nageshCharacteristic Operating System Added: "all"
11/16/11 02:07nageshCharacteristic haxTuple Added: "No"
11/16/11 02:07nageshCharacteristic Estimated Hours Added: ""
11/16/11 02:07nageshCharacteristic Doc Flag Added: "False"
11/16/11 02:07nageshCharacteristic Copyright Assigned Added: "Yes"
11/16/11 02:07acdrupalFound In: -> 3.8.0Beta2
11/21/11 15:52mmcbrideDescription Updated: "ToDo item can be cre..." -> "ToDo item can be cre..."
11/21/11 15:52mmcbrideStatusStatus Changed: New -> Confirmed
08/15/12 16:02modonnellCharacteristic CodeReview Changed: "" -> "Needed"
08/15/12 16:02modonnellStatusStatus Changed: Confirmed -> Resolved
08/15/12 16:02modonnellAssignedAssigned to: "" -> "modonnell"
08/15/12 16:02modonnellResolutionResolution Changed: -> Fixed
08/15/12 16:03modonnellFixed In: -> 4.0.0
08/15/12 16:03modonnellCharacteristic BugHunt2012 Added: "yes"
10/16/12 11:37schurchStatusStatus Changed: Resolved -> Assigned
10/16/12 11:37schurchResolutionResolution Changed: Fixed -> Reopened
10/17/12 16:07modonnellStatusStatus Changed: Assigned -> Resolved
10/17/12 16:07modonnellResolutionResolution Changed: Reopened -> Fixed
12/10/12 14:07schurchStatusStatus Changed: Resolved -> Closed
11/02/12 06:44shyamsunderDescription Updated: "ToDo item can be cre..." -> "ToDo item can be cre..."
11/02/12 06:44shyamsunderStatusStatus Changed: Resolved -> Assigned
11/02/12 06:45shyamsunderCharacteristic Regression Added: "No"
11/30/12 11:34reddogCharacteristic Backport Changed: "No" -> "Yes"
11/30/12 11:36reddogDescription Updated: "ToDo item can be cre..." -> "ToDo item can be cre..."
11/30/12 11:36reddogStatusStatus Changed: Assigned -> Resolved
11/30/12 11:36reddogAssignedAssigned to: "modonnell" -> "reddog"
11/30/12 11:36reddogFixed In: 4.0.0Beta3 -> 4.0.0
04/11/13 16:59ptylerCharacteristic Backport Changed: "Yes" -> "No"

 

mead