[
https://issues.apache.org/jira/browse/OFBIZ-4130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13911645#comment-13911645
]
Jacques Le Roux commented on OFBIZ-4130:
----------------------------------------
Pierre told me
bq. Way to test is: first create 2 new tenants with ./ant create-tenant and
login as the super user of one. Go to tenantdatasource and observe that you'll
see all sources. Apply patch, and log in again. Observe that you can't see the
tenantdatasource.
> Tenant super user (tenant admin) can view all database details of all tenants
> -----------------------------------------------------------------------------
>
> Key: OFBIZ-4130
> URL: https://issues.apache.org/jira/browse/OFBIZ-4130
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 10.04, Release Branch 11.04, SVN trunk,
> Release Branch 12.04, Release Branch 13.07
> Reporter: Pierre Smits
> Priority: Critical
> Fix For: Release Branch 10.04, Release Branch 11.04, SVN trunk,
> Release 11.04.01, Release Branch 12.04, Release Branch 13.07
>
> Attachments: OFBIZ-4130-MultiTenant-visibilty.patch
>
>
> When a new tenant is created and the super user of the tenant (the
> tenant-admin) logs in to WebTools and views the tables Tenant and
> TenantDataSource he/she can see all details of the tenant databases, incl
> TenantName, userID and password of the tenant databases.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
