Bug Tracker Incident #16762

 


Summary
Project
INCDT - xTuple ERP
Incident Category
Bugs
Incident Number
16762
Visibility
public


Product Version
3.8.0RC2
Fixed In Version
4.0.0Alpha


Summary
* It is possible to edit a Purchase Order even after revoking the necessary privileges


Description

Purchase Order can be edited even after revoking 'Maintain Purchase Order' and 'Change Purchase Order Quantity' privileges

Steps to Reproduce:

1. System->Maintain Users and open the user in edit mode
2. Revoke 'Maintain Purchase Order' and 'Change Purchase Order Quantity' privileges of Purchase module
3. Purchase-> Purchase Order->List Open and Query the screen
4. Right click on a released purchase order and select 'Edit' to open the purchase order in edit mode
5. Navigate to Line Items tab, select the line item and click on Edit button
6. Observe that a system message will be displayed as 'Error: You do not have privileges to alter the Purchase
Order' and select 'ok'
7. Change the purchase order quantity, select Save and selects 'Yes' in the update price dialog
8. Select 'Save' again in the Purchase order line item dialog and observe that the changes are saved successfully without any error dialog


Details
Reporter
vinaysingu
CRM Account
ZenQ
Status
Closed
Assigned
reddog


Priority
Normal
Severity
Minor
Updated
04-13-12 12:03
Resolution
Fixed



Comments

DateUsernameComment
04/13/12 12:03schurch

Tested okay in Alpha 4.0 database

02/07/12 10:14reddog

there are 2 privs that control editing Purchase Orders; MaintainPurchaseOrder and MaintainPostedPurchaseOrders.

change window unpostedPurchaseOrders to require both privs to edit a posted/released Purchase Order

02/07/12 10:12svn

Revision: 13244
http://postbooks.svn.sourceforge.net/postbooks/?rev=13244&view=rev
Author: sunsetsolutions
Date: 2012-02-07 15:12:36 +0000 (Tue, 07 Feb 2012)
Log Message:
-----------
Issue #16762:require privs MaintainPurchaseOrders and MaintainPostPurchaseOrders to edit released POs

Modified Paths:
--------------
xtuple/trunk/guiclient/unpostedPurchaseOrders.cpp

01/19/12 15:07ptyler

Confirmed in 3.8RC2 demo db.

01/13/12 04:52vinaysingu

Purchase Order can be edited even after revoking 'Maintain Purchase Order' and 'Change Purchase Order Quantity' privileges

Steps to Reproduce:

1. System->Maintain Users and open the user in edit mode
2. Revoke 'Maintain Purchase Order' and 'Change Purchase Order Quantity' privileges of Purchase module
3. Purchase-> Purchase Order->List Open and Query the screen
4. Right click on a released purchase order and select 'Edit' to open the purchase order in edit mode
5. Navigate to Line Items tab, select the line item and click on Edit button
6. Observe that a system message will be displayed as 'Error: You do not have privileges to alter the Purchase
Order' and select 'ok'
7. Change the purchase order quantity, select Save and selects 'Yes' in the update price dialog
8. Select 'Save' again in the Purchase order line item dialog and observe that the changes are saved successfully without any error dialog



Characteristics

Backport
No
CodeReview
Needed
Operating System
all
Doc Flag
False
Regression
Yes
Copyright Assigned
Yes
HaxTuple
No
Points
None

Files

No Files

Related Documents

TypeNumberDescriptionRelationshipRemove
ProjectXTUPLEAPPSPorted From Mantisx


Subscribers

You do not have permission to view subscribers.


Incident History

DateUsernameFieldChange
01/13/12 04:52vinaysinguNewIncident Added
01/13/12 04:52vinaysinguCharacteristic Backport Added: "No"
01/13/12 04:52vinaysinguCharacteristic CodeReview Added: ""
01/13/12 04:52vinaysinguCharacteristic Operating System Added: "all"
01/13/12 04:52vinaysinguCharacteristic haxTuple Added: "No"
01/13/12 04:52vinaysinguCharacteristic Estimated Hours Added: ""
01/13/12 04:52vinaysinguCharacteristic Doc Flag Added: "False"
01/13/12 04:52vinaysinguCharacteristic Copyright Assigned Added: "Yes"
01/13/12 04:52vinaysinguCharacteristic Regression Added: "Yes"
01/13/12 04:52acdrupalFound In: -> 3.8.0RC2
01/19/12 15:07ptylerDescription Updated: "Purchase Order can b..." -> "Purchase Order can b..."
01/19/12 15:07ptylerStatusStatus Changed: New -> Confirmed
02/07/12 10:14reddogCharacteristic CodeReview Changed: "" -> "Needed"
02/07/12 10:14reddogStatusStatus Changed: Confirmed -> Resolved
02/07/12 10:14reddogAssignedAssigned to: "" -> "reddog"
02/07/12 10:14reddogResolutionResolution Changed: -> Fixed
02/07/12 10:14reddogFixed In: -> 4.0.0
04/13/12 12:03schurchStatusStatus Changed: Resolved -> Closed

 

mead