[ 
https://issues.apache.org/jira/browse/OFBIZ-4158?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12991944#comment-12991944
 ] 

Naveen Kumar N commented on OFBIZ-4158:
---------------------------------------

Hi Jacques,

I've added some data to the current trunk demo server to reproduce the error 
message. 

Here is the link: 
https://demo-trunk.ofbiz.apache.org/accounting/control/findSalesInvoicesByDueDate?daysOffset=100&partyIdFrom=Company&invoiceTypeId=SALES_INVOICE&VIEW_SIZE_1=50&VIEW_INDEX_1=1#

Go to: Accounting >> Payments >> Find Sales Invoice by Due Date >> Then select 
"Company" as 'Organization Party Id' and a 'Days Offset' of "100" or more. >> 
Then try to use the pagination link to access the next 50 items to get the 
error. 

Thanks
Naveen

> Pagination Problem in Accounting Module
> ---------------------------------------
>
>                 Key: OFBIZ-4158
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-4158
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: accounting
>    Affects Versions: SVN trunk
>         Environment: Ubuntu 10.04, Java(TM) SE Runtime Environment (build 
> 1.6.0_15-b03)
>            Reporter: Naveen Kumar N
>              Labels: accounting, pagination
>         Attachments: FindSalesInvoicesByDueDate.png, Screenshot.png
>
>
> Ofbiz Trunk Used (SVN Revision No): 1065553
> In accounting module, the pagination is not working when the following 
> request was performed.
> Requested URL: 
> "https://localhost:8443/accounting/control/findSalesInvoicesByDueDate?daysOffset=365&partyIdFrom=Company&invoiceTypeId=SALES_INVOICE&VIEW_SIZE_1=50&VIEW_INDEX_1=1#";
> Ofbiz throws the following error: 
> "The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL 
> parameter [invoiceTypeId] passed to secure (https) request-map with uri 
> [findSalesInvoicesByDueDate] with an event that calls service 
> [getInvoicePaymentInfoListByDueDateOffset]; this is not allowed for security 
> reasons! The data should be encrypted by making it part of the request body 
> (a form field) instead of the request URL. Moreover it would be kind if you 
> could create a Jira sub-task of 
> https://issues.apache.org/jira/browse/OFBIZ-2330 (check before if a sub-task 
> for this error does not exist). If you are not sure how to create a Jira 
> issue please have a look before at http://cwiki.apache.org/confluence/x/JIB2 
> Thank you in advance for your help. "

-- 
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to