details:   https://code.openbravo.com/erp/devel/pi/rev/6026736637ce
changeset: 31894:6026736637ce
user:      Atul Gaware <atul.gaware <at> openbravo.com>
date:      Thu Dec 22 22:54:41 2016 +0530
summary:   Fixes Issue 34676:It is possible to see prices for list prices for
organizations that you don't have access to.

Problem is Organization property of Product Price in the Product Price By
Warehouse view is not checked whether it appears in Natural Tree of the
Current Logged in Organization.

details:   https://code.openbravo.com/erp/devel/pi/rev/a79fdd227e3a
changeset: 31895:a79fdd227e3a
user:      Mark <markmm82 <at> gmail.com>
date:      Thu Dec 22 13:22:46 2016 -0500
summary:   Related to issue 34676: Code review improvements

Reordered conditions in where clause.

diffstat:

 src-db/database/sourcedata/OBUISEL_SELECTOR.xml |  2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diffs (12 lines):

diff -r 72f382b06664 -r a79fdd227e3a 
src-db/database/sourcedata/OBUISEL_SELECTOR.xml
--- a/src-db/database/sourcedata/OBUISEL_SELECTOR.xml   Mon Apr 10 14:08:16 
2017 +0200
+++ b/src-db/database/sourcedata/OBUISEL_SELECTOR.xml   Thu Dec 22 13:22:46 
2016 -0500
@@ -207,7 +207,7 @@
 <!--2E64F551C7C4470C80C29DBA24B34A5F-->  <NAME><![CDATA[Product]]></NAME>
 <!--2E64F551C7C4470C80C29DBA24B34A5F-->  
<AD_REFERENCE_ID><![CDATA[800060]]></AD_REFERENCE_ID>
 <!--2E64F551C7C4470C80C29DBA24B34A5F-->  
<AD_TABLE_ID><![CDATA[FF8080812DFFA1CF012DFFB889F40016]]></AD_TABLE_ID>
-<!--2E64F551C7C4470C80C29DBA24B34A5F-->  <WHERECLAUSE><![CDATA[e.active='Y' 
and (AD_ISORGINCLUDED(e.orgwarehouse, @AD_Org_Id@, @AD_Client_Id@)<>-1 or 
(AD_ISORGINCLUDED( @AD_Org_Id@, e.orgwarehouse, @AD_Client_Id@)<>-1)) AND 
e.productPrice.priceListVersion.active='Y']]></WHERECLAUSE>
+<!--2E64F551C7C4470C80C29DBA24B34A5F-->  <WHERECLAUSE><![CDATA[e.active='Y' 
AND (AD_ORG_ISINNATURALTREE(e.orgwarehouse, @AD_Org_Id@, @AD_Client_Id@)='Y') 
AND e.productPrice.priceListVersion.active='Y' AND 
(AD_ORG_ISINNATURALTREE(e.productPrice.organization.id, @AD_Org_Id@, 
@AD_Client_Id@)='Y')]]></WHERECLAUSE>
 <!--2E64F551C7C4470C80C29DBA24B34A5F-->  <FILTER_EXPRESSION><![CDATA[if 
(OB.getParameters().get('inpcCurrencyId') && (OB.getWindowId() == '207' || 
OB.getWindowId() == '94EAA455D2644E04AB25D93BE5157B6D')) { " 
e.productPrice.priceListVersion.priceList.currency.id = '" + 
OB.getParameters().get('inpcCurrencyId') + "'" } else if 
(OB.getParameters().get('inpcCurrencyId')) { " 
e.productPrice.priceListVersion.priceList.salesPriceList = " + 
OB.isSalesTransaction()  + " AND 
e.productPrice.priceListVersion.priceList.currency.id = '" + 
OB.getParameters().get('inpcCurrencyId') + "'" }]]></FILTER_EXPRESSION>
 <!--2E64F551C7C4470C80C29DBA24B34A5F-->  
<OBCLKER_TEMPLATE_ID><![CDATA[9314DE8599AD44E7BFC4CC50699042AB]]></OBCLKER_TEMPLATE_ID>
 <!--2E64F551C7C4470C80C29DBA24B34A5F-->  <ISACTIVE><![CDATA[Y]]></ISACTIVE>

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openbravo-commits mailing list
Openbravo-commits@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openbravo-commits

Reply via email to