[jira] [Updated] (OFBIZ-6655) Add session tracking mode and make cookie secure

[Deepak Dixit (JIRA)]

 [ 
https://issues.apache.org/jira/browse/OFBIZ-6655?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Deepak Dixit updated OFBIZ-6655:

Summary: Add session tracking mode and make cookie secure  (was: Add 
sesstion tracking mode and make cookie secure)

> Add session tracking mode and make cookie secure
> 
>
> Key: OFBIZ-6655
> URL: https://issues.apache.org/jira/browse/OFBIZ-6655
> Project: OFBiz
>  Issue Type: Improvement
>  Components: ALL COMPONENTS
>Affects Versions: Trunk, 14.12.01
>Reporter: Deepak Dixit
>Assignee: Deepak Dixit
>
> Need to enhance security at web-app level. 
> As per current implementation:
> - The cookie containing the session identifier is not secure
> - The session identifier is transmitted in the query string of the URL
> To fix these issue we have to add following session config otpions in web.xml
> {code}
> 
>   
>   true
>   true
>   
>   COOKIE
> 
> {code}
> Also we need to update the web-app servlet specification from 2.3 to 3.0
> {code}
>  xmlns="http://java.sun.com/xml/ns/javaee;
> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance;
> xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
> 
> http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd;>
> {code}
> https://tomcat.apache.org/whichversion.html



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Re: Security enhancement

[Deepak Dixit]

Thanks Pierre and Jacques.
I opened ticket for the same: https://issues.apache.org/jira/browse/OFBIZ-6655

Thanks & Regards
—
Deepak Dixit

> On Sep 24, 2015, at 5:35 PM, Jacques Le Roux  
> wrote:
> 
> That's quite a good news, thanks Deepak and Pierre!
> 
> Jacques
> 
> Le 24/09/2015 11:44, Pierre Smits a écrit :
>> Servlet spec 3.0 is implemented in Tomcat versions 7.x. In trunk (and
>> release branch 14.x) we use Tomcat 7.0.64.
>> 
>> So this can be applied in future release branches as well as in r14.x
>> 
>> Best regards,
>> 
>> Pierre Smits
>> 
>> *OFBiz Extensions Marketplace*
>> http://oem.ofbizci.net
>> 
>> On Thu, Sep 24, 2015 at 11:27 AM, Deepak Dixit <
>> deepak.di...@hotwaxsystems.com> wrote:
>> 
>>> Hi Dev,
>>> 
>>> I would like to propose some security enhancement at web-app level.
>>> IMO we have to enhance sessionId and cookie tracking. As per current
>>> implementation:
>>> - The cookie containing the session identifier is not secure
>>> - The session identifier is transmitted in the query string of the URL
>>> 
>>> We can add following configuration in web.xml to fix the above issue:
>>> 
>>> 
>>> 
>>> true
>>> true
>>> 
>>> COOKIE
>>> 
>>> 
>>> To use cookie-config and tracking-mode we need to update the servlet
>>> specification to 3.0
>>> https://tomcat.apache.org/whichversion.html
>>> 
>>> 
>>> Thanks & Regards
>>> —
>>> Deepak Dixit
>>> 
>>> 
>>> 

Re: svn commit: r1705331 [1/2] - in /ofbiz/branches/release14.12: ./ applications/accounting/webapp/accounting/reports/ applications/content/src/org/ofbiz/content/content/ applications/order/src/org/o

[Deepak Dixit]

Hi Jacques, 

ecommerce is broken, I think you missed some groovy file where description, 
name is used directly. like  

categoryDescription = categoryContentWrapper.DESCRIPTION;

I am getting following error while accession ecommerce on updated local box:
{code}
[java] Caused by: java.lang.IllegalArgumentException: Error running script at 
location 
[component://order/webapp/ordermgr/WEB-INF/actions/entry/catalog/Category.groovy]:
 groovy.lang.MissingPropertyException: No such property: DESCRIPTION for class: 
org.ofbiz.product.category.CategoryContentWrapper

{code}


Thanks & Regards
—
Deepak Dixit

> On Sep 25, 2015, at 10:14 PM, Jacques Le Roux  
> wrote:
> 
> I did not backport to older releases because of too much conflicts, anyway 
> it's a low vulnerability
> 
> Jacqued
> 
> 
> Le 25/09/2015 18:34, jler...@apache.org a écrit :
>> Author: jleroux
>> Date: Fri Sep 25 16:34:34 2015
>> New Revision: 1705331
>> 
>> URL: http://svn.apache.org/viewvc?rev=1705331=rev
>> Log:
>> "Applied fix from trunk for revision: 1705329  " (conflicts handled by hand)
>> 
>> r1705329 | jleroux | 2015-09-25 18:27:12 +0200 (ven. 25 sept. 2015) | 20 
>> lignes
>> 
>> I found a possible XSS attack through 
>> ProductContentWrapper.java.getProductContentAsText() which is notably used 
>> in several FTL files. This exists also in others *ContentWrapper.java.
>> Note that in supported releases it's hard to exploit, it's a Stored XSS 
>> https://www.owasp.org/index.php/Types_of_Cross-Site_Scripting which means 
>> you need 1st to somehow inject exploiting code in the DB.
>> 
>> This fixes it by changing the ContentWrapper interface
>> from
>> public interface ContentWrapper {
>> public StringUtil.StringWrapper get(String contentTypeId);
>> }
>> to
>> public interface ContentWrapper {
>> public StringUtil.StringWrapper get(String contentTypeId, String 
>> encoderType) {
>> }
>> 
>> And changing the Category, Party, Product, ProductPromo and WorkEffort 
>> ContentWrapperS accordingly. This means to use 2 types of encoderTypes: 
>> "html" and "url".
>> The "html"  encoderType will be used for all ProductContentTypes but those 
>> who contain URL in their ContentTypeIdS (actually end with, "_URL") which 
>> will use "url" encoderType.
>> It concerns not only the get() method but also methods like 
>> getPartyContentAsText(), getProductContentAsText(), etc.
>> 
>> It seems a big change but it's straightforward. It's normally complete.
>> 
>> There are some (unrelated) tabs replaced by spaces here and there, and few 
>> trailing spaces removed but nothing big
>> 
>> 
>> 
>> Modified:
>> ofbiz/branches/release14.12/   (props changed)
>> 
>> ofbiz/branches/release14.12/applications/accounting/webapp/accounting/reports/SalesInvoiceByProductCategorySummary.ftl
>> 
>> ofbiz/branches/release14.12/applications/content/src/org/ofbiz/content/content/ContentWrapper.java
>> 
>> ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/order/OrderReturnServices.java
>> 
>> ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/shoppingcart/ShoppingCartItem.java
>> 
>> ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/shoppingcart/product/ProductPromoWorker.java
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/entry/catalog/InlineProductDetail.groovy
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/entry/catalog/ProductDetail.groovy
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/order/CompanyHeader.groovy
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/SplitShip.ftl
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/cart/showcartitems.ftl
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/breadcrumbs.ftl
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/categorydetail.ftl
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/compareproducts.ftl
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/compareproductslist.ftl
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/configproductdetail.ftl
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/inlineProductDetail.ftl
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/productdetail.ftl
>> 
>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/productsummary.ftl
>> 
>> 

Re: svn commit: r1705331 [1/2] - in /ofbiz/branches/release14.12: ./ applications/accounting/webapp/accounting/reports/ applications/content/src/org/ofbiz/content/content/ applications/order/src/org/o

[Deepak Dixit]

Hi Jacques,

Can we add the get method with default encoding to maintain the backward 
compatibility?


Thanks & Regards
—
Deepak Dixit



> On Sep 26, 2015, at 2:54 PM, Deepak Dixit  
> wrote:
> 
> Hi Jacques, 
> 
> ecommerce is broken, I think you missed some groovy file where description, 
> name is used directly. like  
> 
> categoryDescription = categoryContentWrapper.DESCRIPTION;
> 
> I am getting following error while accession ecommerce on updated local box:
> {code}
> [java] Caused by: java.lang.IllegalArgumentException: Error running script at 
> location 
> [component://order/webapp/ordermgr/WEB-INF/actions/entry/catalog/Category.groovy]:
>  groovy.lang.MissingPropertyException: No such property: DESCRIPTION for 
> class: org.ofbiz.product.category.CategoryContentWrapper
> 
> {code}
> 
> 
> Thanks & Regards
> —
> Deepak Dixit
> 
>> On Sep 25, 2015, at 10:14 PM, Jacques Le Roux  
>> wrote:
>> 
>> I did not backport to older releases because of too much conflicts, anyway 
>> it's a low vulnerability
>> 
>> Jacqued
>> 
>> 
>> Le 25/09/2015 18:34, jler...@apache.org a écrit :
>>> Author: jleroux
>>> Date: Fri Sep 25 16:34:34 2015
>>> New Revision: 1705331
>>> 
>>> URL: http://svn.apache.org/viewvc?rev=1705331=rev
>>> Log:
>>> "Applied fix from trunk for revision: 1705329  " (conflicts handled by hand)
>>> 
>>> r1705329 | jleroux | 2015-09-25 18:27:12 +0200 (ven. 25 sept. 2015) | 20 
>>> lignes
>>> 
>>> I found a possible XSS attack through 
>>> ProductContentWrapper.java.getProductContentAsText() which is notably used 
>>> in several FTL files. This exists also in others *ContentWrapper.java.
>>> Note that in supported releases it's hard to exploit, it's a Stored XSS 
>>> https://www.owasp.org/index.php/Types_of_Cross-Site_Scripting which means 
>>> you need 1st to somehow inject exploiting code in the DB.
>>> 
>>> This fixes it by changing the ContentWrapper interface
>>> from
>>>public interface ContentWrapper {
>>>public StringUtil.StringWrapper get(String contentTypeId);
>>>}
>>> to
>>>public interface ContentWrapper {
>>>public StringUtil.StringWrapper get(String contentTypeId, String 
>>> encoderType) {
>>>}
>>> 
>>> And changing the Category, Party, Product, ProductPromo and WorkEffort 
>>> ContentWrapperS accordingly. This means to use 2 types of encoderTypes: 
>>> "html" and "url".
>>> The "html"  encoderType will be used for all ProductContentTypes but those 
>>> who contain URL in their ContentTypeIdS (actually end with, "_URL") which 
>>> will use "url" encoderType.
>>> It concerns not only the get() method but also methods like 
>>> getPartyContentAsText(), getProductContentAsText(), etc.
>>> 
>>> It seems a big change but it's straightforward. It's normally complete.
>>> 
>>> There are some (unrelated) tabs replaced by spaces here and there, and few 
>>> trailing spaces removed but nothing big
>>> 
>>> 
>>> 
>>> Modified:
>>>ofbiz/branches/release14.12/   (props changed)
>>>
>>> ofbiz/branches/release14.12/applications/accounting/webapp/accounting/reports/SalesInvoiceByProductCategorySummary.ftl
>>>
>>> ofbiz/branches/release14.12/applications/content/src/org/ofbiz/content/content/ContentWrapper.java
>>>
>>> ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/order/OrderReturnServices.java
>>>
>>> ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/shoppingcart/ShoppingCartItem.java
>>>
>>> ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/shoppingcart/product/ProductPromoWorker.java
>>>
>>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/entry/catalog/InlineProductDetail.groovy
>>>
>>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/entry/catalog/ProductDetail.groovy
>>>
>>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/order/CompanyHeader.groovy
>>>
>>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/SplitShip.ftl
>>>
>>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/cart/showcartitems.ftl
>>>
>>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/breadcrumbs.ftl
>>>
>>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/categorydetail.ftl
>>>
>>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/compareproducts.ftl
>>>
>>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/compareproductslist.ftl
>>>
>>> ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/configproductdetail.ftl
>>>
>>> 

[jira] [Commented] (OFBIZ-6654) Display of a recurrent workeffort in workeffort calendar do not respect estimatedStart/CompletionDate

[Gil Portenseigne (JIRA)]

[ 
https://issues.apache.org/jira/browse/OFBIZ-6654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=14909124#comment-14909124
 ] 

Gil Portenseigne commented on OFBIZ-6654:
-

Many thanks for the feedback, it's what i imagined, and I guess actual 
date-time will be stored on a new workeffort for each day.

> Display of a recurrent workeffort in workeffort calendar do not respect 
> estimatedStart/CompletionDate
> -
>
> Key: OFBIZ-6654
> URL: https://issues.apache.org/jira/browse/OFBIZ-6654
> Project: OFBiz
>  Issue Type: Bug
>  Components: workeffort
>Affects Versions: Trunk
>Reporter: Gil Portenseigne
>Assignee: Gil Portenseigne
> Attachments: OFBIZ-6654.patch, screenshot-1.png, screenshot-2.png
>
>
> I created DAILY_GRIND recurrent workeffort with estimated start date to 
> 2015-09-02 and estimated completion date to 2015-09-22. The task is displayed 
> every day in the month.
> Haven't tested it on branches...



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Created] (OFBIZ-6657) Private contactlist selection

[Pierre Smits (JIRA)]

Pierre Smits created OFBIZ-6657:
---

 Summary: Private contactlist selection
 Key: OFBIZ-6657
 URL: https://issues.apache.org/jira/browse/OFBIZ-6657
 Project: OFBiz
  Issue Type: Bug
  Components: content
Affects Versions: Trunk
Reporter: Pierre Smits


A user can select a private contactlist to be associated with a website. This 
should not be happening.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Created] (OFBIZ-6655) Add sesstion tracking mode and make cookie secure

[Deepak Dixit (JIRA)]

Deepak Dixit created OFBIZ-6655:
---

 Summary: Add sesstion tracking mode and make cookie secure
 Key: OFBIZ-6655
 URL: https://issues.apache.org/jira/browse/OFBIZ-6655
 Project: OFBiz
  Issue Type: Improvement
  Components: ALL COMPONENTS
Affects Versions: Trunk, 14.12.01
Reporter: Deepak Dixit
Assignee: Deepak Dixit


Need to enhance security at web-app level. 
As per current implementation:
- The cookie containing the session identifier is not secure
- The session identifier is transmitted in the query string of the URL

To fix these issue we have to add following session config otpions in web.xml
{code}


true
true

COOKIE

{code}

Also we need to update the web-app servlet specification from 2.3 to 3.0
{code}
http://java.sun.com/xml/ns/javaee;
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance;
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd;>
{code}
https://tomcat.apache.org/whichversion.html




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Created] (OFBIZ-6656) Changing ContactList focus from public to private doesn't expire website contactlist association

[Pierre Smits (JIRA)]

Pierre Smits created OFBIZ-6656:
---

 Summary: Changing ContactList focus from public to private doesn't 
expire website contactlist association
 Key: OFBIZ-6656
 URL: https://issues.apache.org/jira/browse/OFBIZ-6656
 Project: OFBiz
  Issue Type: Bug
  Components: content, marketing
Affects Versions: Trunk
Reporter: Pierre Smits


When a user changes the focus of a contactlist (in the marketing component) 
from isPublic="Y" to isPublic="N" and the list is associated to a website (in 
the content component), then the expiry date of contactlist should be set in 
the website association.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Re: svn commit: r1705331 [1/2] - in /ofbiz/branches/release14.12: ./ applications/accounting/webapp/accounting/reports/ applications/content/src/org/ofbiz/content/content/ applications/order/src/org/o

[Jacques Le Roux]

I just spotted some others in FTL files, handling them...

Jacques

Le 26/09/2015 13:03, Jacques Le Roux a écrit :

Hi Deepak,

I just spotted that before committing r1705405. I will handle that now

Also while automatically (but handling conflicts by hand) I (it?) also missed 
some class files (see r1705406).

Thanks

Jacques

Le 26/09/2015 11:24, Deepak Dixit a écrit :

Hi Jacques,

ecommerce is broken, I think you missed some groovy file where description, 
name is used directly. like

categoryDescription = categoryContentWrapper.DESCRIPTION;

I am getting following error while accession ecommerce on updated local box:
{code}
[java] Caused by: java.lang.IllegalArgumentException: Error running script at location 
[component://order/webapp/ordermgr/WEB-INF/actions/entry/catalog/Category.groovy]: groovy.lang.MissingPropertyException: No such property: 
DESCRIPTION for class: org.ofbiz.product.category.CategoryContentWrapper


{code}


Thanks & Regards
—
Deepak Dixit


On Sep 25, 2015, at 10:14 PM, Jacques Le Roux  
wrote:

I did not backport to older releases because of too much conflicts, anyway it's 
a low vulnerability

Jacqued


Le 25/09/2015 18:34, jler...@apache.org a écrit :

Author: jleroux
Date: Fri Sep 25 16:34:34 2015
New Revision: 1705331

URL: http://svn.apache.org/viewvc?rev=1705331=rev
Log:
"Applied fix from trunk for revision: 1705329  " (conflicts handled by hand)

r1705329 | jleroux | 2015-09-25 18:27:12 +0200 (ven. 25 sept. 2015) | 20 lignes

I found a possible XSS attack through ProductContentWrapper.java.getProductContentAsText() which is notably used in several FTL files. This 
exists also in others *ContentWrapper.java.
Note that in supported releases it's hard to exploit, it's a Stored XSS https://www.owasp.org/index.php/Types_of_Cross-Site_Scripting which means 
you need 1st to somehow inject exploiting code in the DB.


This fixes it by changing the ContentWrapper interface
from
 public interface ContentWrapper {
 public StringUtil.StringWrapper get(String contentTypeId);
 }
to
 public interface ContentWrapper {
 public StringUtil.StringWrapper get(String contentTypeId, String 
encoderType) {
 }

And changing the Category, Party, Product, ProductPromo and WorkEffort ContentWrapperS accordingly. This means to use 2 types of encoderTypes: 
"html" and "url".
The "html"  encoderType will be used for all ProductContentTypes but those who contain URL in their ContentTypeIdS (actually end with, "_URL") 
which will use "url" encoderType.

It concerns not only the get() method but also methods like 
getPartyContentAsText(), getProductContentAsText(), etc.

It seems a big change but it's straightforward. It's normally complete.

There are some (unrelated) tabs replaced by spaces here and there, and few 
trailing spaces removed but nothing big



Modified:
 ofbiz/branches/release14.12/   (props changed)
ofbiz/branches/release14.12/applications/accounting/webapp/accounting/reports/SalesInvoiceByProductCategorySummary.ftl
ofbiz/branches/release14.12/applications/content/src/org/ofbiz/content/content/ContentWrapper.java
ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/order/OrderReturnServices.java
ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/shoppingcart/ShoppingCartItem.java
ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/shoppingcart/product/ProductPromoWorker.java
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/entry/catalog/InlineProductDetail.groovy
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/entry/catalog/ProductDetail.groovy
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/order/CompanyHeader.groovy
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/SplitShip.ftl
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/cart/showcartitems.ftl
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/breadcrumbs.ftl
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/categorydetail.ftl
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/compareproducts.ftl
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/compareproductslist.ftl
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/configproductdetail.ftl
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/inlineProductDetail.ftl
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/productdetail.ftl
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/productsummary.ftl

[jira] [Commented] (OFBIZ-6568) Updates Groovy to 2.4.4 version

[Jacques Le Roux (JIRA)]

[ 
https://issues.apache.org/jira/browse/OFBIZ-6568?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=14909208#comment-14909208
 ] 

Jacques Le Roux commented on OFBIZ-6568:


We got issues while doing so, we are working with the (now Apache) Grooy team 
to fix them...

> Updates Groovy to  2.4.4 version
> 
>
> Key: OFBIZ-6568
> URL: https://issues.apache.org/jira/browse/OFBIZ-6568
> Project: OFBiz
>  Issue Type: Task
>  Components: framework
>Reporter: Jacques Le Roux
>Assignee: Jacques Le Roux
> Fix For: 14.12.01, 12.04.06, 13.07.03, Upcoming Branch
>
>
> Since it's a security fix we should also update all releases branches. 
> http://groovy-lang.org/security.html



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

buildbot failure in ASF Buildbot on ofbiz-branch13

[buildbot]

The Buildbot has detected a new failure on builder ofbiz-branch13 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch13/builds/8

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz13-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release13.07] 1697651
Blamelist: 

BUILD FAILED: failed

Sincerely,
 -The Buildbot

buildbot success in ASF Buildbot on ofbiz-branch14

[buildbot]

The Buildbot has detected a restored build on builder ofbiz-branch14 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch14/builds/12

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz14-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release14.12] 1697994
Blamelist: 

Build succeeded!

Sincerely,
 -The Buildbot

[jira] [Closed] (OFBIZ-6626) screenrenderer doesn't utilize the various html*MacroLibrary.ftl files

[Jacques Le Roux (JIRA)]

 [ 
https://issues.apache.org/jira/browse/OFBIZ-6626?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jacques Le Roux closed OFBIZ-6626.
--
Resolution: Duplicate

> screenrenderer doesn't utilize the various html*MacroLibrary.ftl files
> --
>
> Key: OFBIZ-6626
> URL: https://issues.apache.org/jira/browse/OFBIZ-6626
> Project: OFBiz
>  Issue Type: Bug
>  Components: themes
>Affects Versions: Trunk, Bootstrap theme
>Reporter: Pierre Smits
>  Labels: configuration, theme
>
> Despite that we currently can associate theme specific html*MacroLibrary.ftl 
> for a theme, these themes aren't used to render the various widgets.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Updated] (OFBIZ-6281) Many classes in framework/widget are still using html-based renderers, instead of macro-based

[Jacques Le Roux (JIRA)]

 [ 
https://issues.apache.org/jira/browse/OFBIZ-6281?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jacques Le Roux updated OFBIZ-6281:
---
Affects Version/s: Trunk
   Bootstrap theme

> Many classes in framework/widget are still using html-based renderers, 
> instead of macro-based
> -
>
> Key: OFBIZ-6281
> URL: https://issues.apache.org/jira/browse/OFBIZ-6281
> Project: OFBiz
>  Issue Type: Sub-task
>  Components: framework
>Affects Versions: Trunk, Bootstrap theme
>Reporter: Adam Heath
>Priority: Minor
>
> The html renderers had hard-coded output.  A new system had been developed, 
> which uses macros; this allowed for swapping the output with something more 
> or less advanced, without having to change the code.
> However, many classes are still using the old rendering system.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

buildbot failure in ASF Buildbot on ofbiz-branch14

[buildbot]

The Buildbot has detected a new failure on builder ofbiz-branch14 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch14/builds/11

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz14-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release14.12] 1697649
Blamelist: 

BUILD FAILED: failed

Sincerely,
 -The Buildbot

OFBiz Buildbot is stale since August 25

[Jacques Le Roux]

FYI: https://issues.apache.org/jira/servicedesk/agent/INFRA/issue/INFRA-10496

Jacques

[jira] [Commented] (OFBIZ-6655) Add session tracking mode and make cookie secure

[Jacques Le Roux (JIRA)]

[ 
https://issues.apache.org/jira/browse/OFBIZ-6655?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=14909280#comment-14909280
 ] 

Jacques Le Roux commented on OFBIZ-6655:


Hi Deepak,

I don't think we need to put 
{code}
 https://tomcat.apache.org/tomcat-7.0-doc/appdev/web.xml.txt and 
https://download.oracle.com/otn-pub/jcp/servlet-3.0-fr-oth-JSpec/servlet-3_0-final-spec.pdf
 chapter 14
The issue I foresee is if we don't when we will upgrade Tomcat we will not need 
to update, it it will be automatically done.

On the other hand we could keep the rest (xmlns, etc.). Did I miss something?

> Add session tracking mode and make cookie secure
> 
>
> Key: OFBIZ-6655
> URL: https://issues.apache.org/jira/browse/OFBIZ-6655
> Project: OFBiz
>  Issue Type: Improvement
>  Components: ALL COMPONENTS
>Affects Versions: Trunk, 14.12.01
>Reporter: Deepak Dixit
>Assignee: Deepak Dixit
>
> Need to enhance security at web-app level. 
> As per current implementation:
> - The cookie containing the session identifier is not secure
> - The session identifier is transmitted in the query string of the URL
> To fix these issue we have to add following session config otpions in web.xml
> {code}
> 
>   
>   true
>   true
>   
>   COOKIE
> 
> {code}
> Also we need to update the web-app servlet specification from 2.3 to 3.0
> {code}
>  xmlns="http://java.sun.com/xml/ns/javaee;
> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance;
> xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
> 
> http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd;>
> {code}
> https://tomcat.apache.org/whichversion.html



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Updated] (OFBIZ-6637) Work Effort Month Calendar View Is Broken

[Gil Portenseigne (JIRA)]

 [ 
https://issues.apache.org/jira/browse/OFBIZ-6637?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Gil Portenseigne updated OFBIZ-6637:

Affects Version/s: (was: Upcoming Branch)
   Release Branch 12.04
   Release Branch 13.07
   Release Branch 14.12
   Trunk
Fix Version/s: Upcoming Branch
   13.07.03
   12.04.06
   14.12.01

> Work Effort Month Calendar View Is Broken
> -
>
> Key: OFBIZ-6637
> URL: https://issues.apache.org/jira/browse/OFBIZ-6637
> Project: OFBiz
>  Issue Type: Bug
>  Components: workeffort
>Affects Versions: Release Branch 12.04, Release Branch 13.07, Release 
> Branch 14.12, Trunk
>Reporter: Adrian Crum
>Assignee: Gil Portenseigne
> Fix For: 14.12.01, 12.04.06, 13.07.03, Upcoming Branch
>
> Attachments: OFBIZ-6637.patch
>
>
> The Work Effort Month calendar view does not work. The screen does not 
> display:
> https://localhost:8443/workeffort/control/calendar?period=month
> and CPU utilization remains high. It appears to be in an endless loop.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

buildbot failure in ASF Buildbot on ofbiz-branch14

[buildbot]

The Buildbot has detected a new failure on builder ofbiz-branch14 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch14/builds/16

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz14-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release14.12] 1698264
Blamelist: 

BUILD FAILED: failed

Sincerely,
 -The Buildbot

Re: svn commit: r1705331 [1/2] - in /ofbiz/branches/release14.12: ./ applications/accounting/webapp/accounting/reports/ applications/content/src/org/ofbiz/content/content/ applications/order/src/org/o

[Jacques Le Roux]

Hi Deepak,

I just spotted that before committing r1705405. I will handle that now

Also while automatically (but handling conflicts by hand) I (it?) also missed 
some class files (see r1705406).

Thanks

Jacques

Le 26/09/2015 11:24, Deepak Dixit a écrit :

Hi Jacques,

ecommerce is broken, I think you missed some groovy file where description, 
name is used directly. like

categoryDescription = categoryContentWrapper.DESCRIPTION;

I am getting following error while accession ecommerce on updated local box:
{code}
[java] Caused by: java.lang.IllegalArgumentException: Error running script at 
location 
[component://order/webapp/ordermgr/WEB-INF/actions/entry/catalog/Category.groovy]:
 groovy.lang.MissingPropertyException: No such property: DESCRIPTION for class: 
org.ofbiz.product.category.CategoryContentWrapper

{code}


Thanks & Regards
—
Deepak Dixit


On Sep 25, 2015, at 10:14 PM, Jacques Le Roux  
wrote:

I did not backport to older releases because of too much conflicts, anyway it's 
a low vulnerability

Jacqued


Le 25/09/2015 18:34, jler...@apache.org a écrit :

Author: jleroux
Date: Fri Sep 25 16:34:34 2015
New Revision: 1705331

URL: http://svn.apache.org/viewvc?rev=1705331=rev
Log:
"Applied fix from trunk for revision: 1705329  " (conflicts handled by hand)

r1705329 | jleroux | 2015-09-25 18:27:12 +0200 (ven. 25 sept. 2015) | 20 lignes

I found a possible XSS attack through 
ProductContentWrapper.java.getProductContentAsText() which is notably used in 
several FTL files. This exists also in others *ContentWrapper.java.
Note that in supported releases it's hard to exploit, it's a Stored XSS 
https://www.owasp.org/index.php/Types_of_Cross-Site_Scripting which means you 
need 1st to somehow inject exploiting code in the DB.

This fixes it by changing the ContentWrapper interface
from
 public interface ContentWrapper {
 public StringUtil.StringWrapper get(String contentTypeId);
 }
to
 public interface ContentWrapper {
 public StringUtil.StringWrapper get(String contentTypeId, String 
encoderType) {
 }

And changing the Category, Party, Product, ProductPromo and WorkEffort ContentWrapperS accordingly. 
This means to use 2 types of encoderTypes: "html" and "url".
The "html"  encoderType will be used for all ProductContentTypes but those who contain URL in their 
ContentTypeIdS (actually end with, "_URL") which will use "url" encoderType.
It concerns not only the get() method but also methods like 
getPartyContentAsText(), getProductContentAsText(), etc.

It seems a big change but it's straightforward. It's normally complete.

There are some (unrelated) tabs replaced by spaces here and there, and few 
trailing spaces removed but nothing big



Modified:
 ofbiz/branches/release14.12/   (props changed)
 
ofbiz/branches/release14.12/applications/accounting/webapp/accounting/reports/SalesInvoiceByProductCategorySummary.ftl
 
ofbiz/branches/release14.12/applications/content/src/org/ofbiz/content/content/ContentWrapper.java
 
ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/order/OrderReturnServices.java
 
ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/shoppingcart/ShoppingCartItem.java
 
ofbiz/branches/release14.12/applications/order/src/org/ofbiz/order/shoppingcart/product/ProductPromoWorker.java
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/entry/catalog/InlineProductDetail.groovy
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/entry/catalog/ProductDetail.groovy
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/WEB-INF/actions/order/CompanyHeader.groovy
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/SplitShip.ftl
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/cart/showcartitems.ftl
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/breadcrumbs.ftl
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/categorydetail.ftl
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/compareproducts.ftl
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/compareproductslist.ftl
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/configproductdetail.ftl
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/inlineProductDetail.ftl
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/productdetail.ftl
 
ofbiz/branches/release14.12/applications/order/webapp/ordermgr/entry/catalog/productsummary.ftl
 

[jira] [Assigned] (OFBIZ-6618) Selenium test integration using XML files

[Jacques Le Roux (JIRA)]

 [ 
https://issues.apache.org/jira/browse/OFBIZ-6618?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jacques Le Roux reassigned OFBIZ-6618:
--

Assignee: Jacques Le Roux

> Selenium test integration using XML files
> -
>
> Key: OFBIZ-6618
> URL: https://issues.apache.org/jira/browse/OFBIZ-6618
> Project: OFBiz
>  Issue Type: Test
>  Components: framework
>Reporter: Ruud Griepsma
>Assignee: Jacques Le Roux
>Priority: Minor
>  Labels: selenium, test, webdriver
> Attachments: ModelTestSuite.patch, test-suite.patch
>
>
> Added a new type of test, for testing with Selenium WebDriver, but without 
> writing any Java code. This will help making GUI tests quicker and easier to 
> create. Test steps and instances are defined in XML files, like example 
> below, which tests the login procedure for the admin user.
> 
>   
>datavalue="https://localhost:8443/example/control/checkLogin/main"/>
>dataname="username"/>
>dataname="password"/>
>webobject="input[type=submit]"/>
>   
>   
>   
>   
>   
> 
> 
>   
> 
> Git repository with example (put in 'hot-deploy' folder and check README.txt 
> file):
> git clone https://gerrit.antwebsystems.com/growerptest



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Closed] (OFBIZ-6570) Anonymous unsubscribe from contact list generates an error

[Jacques Le Roux (JIRA)]

 [ 
https://issues.apache.org/jira/browse/OFBIZ-6570?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jacques Le Roux closed OFBIZ-6570.
--
   Resolution: Fixed
Fix Version/s: Upcoming Branch
   13.07.03
   12.04.06
   14.12.01

Backported in
R14.12 r1705455
R13.07 r1705456
R12.04 r1705457


> Anonymous unsubscribe from contact list generates an error
> --
>
> Key: OFBIZ-6570
> URL: https://issues.apache.org/jira/browse/OFBIZ-6570
> Project: OFBiz
>  Issue Type: Bug
>  Components: marketing, specialpurpose/ecommerce
>Affects Versions: Trunk
>Reporter: Pierre Smits
>Assignee: Shi Jinghai
> Fix For: 14.12.01, 12.04.06, 13.07.03, Upcoming Branch
>
>
> When trying to unsubscribe as an anonymous user, following error is shown:
> {code}
> Exception thrown while creating the "newEntity" GenericValue: 
> org.ofbiz.entity.GenericEntityException: Error while inserting: 
> [GenericEntity:ContactListPartyStatus][contactListId,9000(java.lang.String)][createdStamp,2015-08-06
>  12:26:31.205(java.sql.Timestamp)][createdTxStamp,2015-08-06 
> 12:26:31.007(java.sql.Timestamp)][lastUpdatedStamp,2015-08-06 
> 12:26:31.205(java.sql.Timestamp)][lastUpdatedTxStamp,2015-08-06 
> 12:26:31.007(java.sql.Timestamp)][partyId,_NA_(java.lang.String)][setByUserLoginId,system(java.lang.String)][statusDate,2015-08-06
>  
> 12:26:31.205(java.sql.Timestamp)][statusId,CLPT_UNSUBS_PENDING(java.lang.String)]
>  (SQL Exception while executing the following:INSERT INTO 
> OFBIZ.CONTACT_LIST_PARTY_STATUS (CONTACT_LIST_ID, PARTY_ID, FROM_DATE, 
> STATUS_DATE, STATUS_ID, SET_BY_USER_LOGIN_ID, OPT_IN_VERIFY_CODE, 
> LAST_UPDATED_STAMP, LAST_UPDATED_TX_STAMP, CREATED_STAMP, CREATED_TX_STAMP) 
> VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) (Column 'FROM_DATE' cannot accept a 
> NULL value.)) (Error while inserting: 
> [GenericEntity:ContactListPartyStatus][contactListId,9000(java.lang.String)][createdStamp,2015-08-06
>  12:26:31.205(java.sql.Timestamp)][createdTxStamp,2015-08-06 
> 12:26:31.007(java.sql.Timestamp)][lastUpdatedStamp,2015-08-06 
> 12:26:31.205(java.sql.Timestamp)][lastUpdatedTxStamp,2015-08-06 
> 12:26:31.007(java.sql.Timestamp)][partyId,_NA_(java.lang.String)][setByUserLoginId,system(java.lang.String)][statusDate,2015-08-06
>  
> 12:26:31.205(java.sql.Timestamp)][statusId,CLPT_UNSUBS_PENDING(java.lang.String)]
>  (SQL Exception while executing the following:INSERT INTO 
> OFBIZ.CONTACT_LIST_PARTY_STATUS (CONTACT_LIST_ID, PARTY_ID, FROM_DATE, 
> STATUS_DATE, STATUS_ID, SET_BY_USER_LOGIN_ID, OPT_IN_VERIFY_CODE, 
> LAST_UPDATED_STAMP, LAST_UPDATED_TX_STAMP, CREATED_STAMP, CREATED_TX_STAMP) 
> VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) (Column 'FROM_DATE' cannot accept a 
> NULL value.)))
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

buildbot success in ASF Buildbot on ofbiz-trunk

[buildbot]

The Buildbot has detected a restored build on builder ofbiz-trunk while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-trunk/builds/51

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/trunk] 1697993
Blamelist: 

Build succeeded!

Sincerely,
 -The Buildbot

buildbot failure in ASF Buildbot on ofbiz-branch14

[buildbot]

The Buildbot has detected a new failure on builder ofbiz-branch14 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch14/builds/22

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz14-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release14.12] 1702003
Blamelist: 

BUILD FAILED: failed

Sincerely,
 -The Buildbot

buildbot success in ASF Buildbot on ofbiz-branch14

[buildbot]

The Buildbot has detected a restored build on builder ofbiz-branch14 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch14/builds/21

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz14-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release14.12] 1701937
Blamelist: 

Build succeeded!

Sincerely,
 -The Buildbot

[jira] [Commented] (OFBIZ-6626) screenrenderer doesn't utilize the various html*MacroLibrary.ftl files

[Pierre Smits (JIRA)]

[ 
https://issues.apache.org/jira/browse/OFBIZ-6626?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=14909294#comment-14909294
 ] 

Pierre Smits commented on OFBIZ-6626:
-

Thanks for spotting that, Jacques!

> screenrenderer doesn't utilize the various html*MacroLibrary.ftl files
> --
>
> Key: OFBIZ-6626
> URL: https://issues.apache.org/jira/browse/OFBIZ-6626
> Project: OFBiz
>  Issue Type: Bug
>  Components: themes
>Affects Versions: Trunk, Bootstrap theme
>Reporter: Pierre Smits
>  Labels: configuration, theme
>
> Despite that we currently can associate theme specific html*MacroLibrary.ftl 
> for a theme, these themes aren't used to render the various widgets.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Updated] (OFBIZ-6654) Display of a recurrent workeffort in workeffort calendar do not respect estimatedStart/CompletionDate

[Gil Portenseigne (JIRA)]

 [ 
https://issues.apache.org/jira/browse/OFBIZ-6654?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Gil Portenseigne updated OFBIZ-6654:

Affects Version/s: Release Branch 12.04
   Release Branch 13.07
   Release Branch 14.12
Fix Version/s: Upcoming Branch
   13.07.03
   12.04.06
   14.12.01
  Description: 
I created DAILY_GRIND recurrent workeffort with estimated start date to 
2015-09-02 and estimated completion date to 2015-09-22. The task is displayed 
every day in the month.



  was:
I created DAILY_GRIND recurrent workeffort with estimated start date to 
2015-09-02 and estimated completion date to 2015-09-22. The task is displayed 
every day in the month.

Haven't tested it on branches...


> Display of a recurrent workeffort in workeffort calendar do not respect 
> estimatedStart/CompletionDate
> -
>
> Key: OFBIZ-6654
> URL: https://issues.apache.org/jira/browse/OFBIZ-6654
> Project: OFBiz
>  Issue Type: Bug
>  Components: workeffort
>Affects Versions: Release Branch 12.04, Release Branch 13.07, Release 
> Branch 14.12, Trunk
>Reporter: Gil Portenseigne
>Assignee: Gil Portenseigne
> Fix For: 14.12.01, 12.04.06, 13.07.03, Upcoming Branch
>
> Attachments: OFBIZ-6654.patch, screenshot-1.png, screenshot-2.png
>
>
> I created DAILY_GRIND recurrent workeffort with estimated start date to 
> 2015-09-02 and estimated completion date to 2015-09-22. The task is displayed 
> every day in the month.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Updated] (OFBIZ-6654) Display of a recurrent workeffort in workeffort calendar do not respect estimatedStart/CompletionDate

[Gil Portenseigne (JIRA)]

 [ 
https://issues.apache.org/jira/browse/OFBIZ-6654?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Gil Portenseigne updated OFBIZ-6654:

Attachment: OFBIZ-6654.patch

Better fix, ignoring temporal expression for actual dated workeffort

> Display of a recurrent workeffort in workeffort calendar do not respect 
> estimatedStart/CompletionDate
> -
>
> Key: OFBIZ-6654
> URL: https://issues.apache.org/jira/browse/OFBIZ-6654
> Project: OFBiz
>  Issue Type: Bug
>  Components: workeffort
>Affects Versions: Release Branch 12.04, Release Branch 13.07, Release 
> Branch 14.12, Trunk
>Reporter: Gil Portenseigne
>Assignee: Gil Portenseigne
> Fix For: 14.12.01, 12.04.06, 13.07.03, Upcoming Branch
>
> Attachments: OFBIZ-6654.patch, screenshot-1.png, screenshot-2.png
>
>
> I created DAILY_GRIND recurrent workeffort with estimated start date to 
> 2015-09-02 and estimated completion date to 2015-09-22. The task is displayed 
> every day in the month.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Updated] (OFBIZ-6654) Display of a recurrent workeffort in workeffort calendar do not respect estimatedStart/CompletionDate

[Gil Portenseigne (JIRA)]

 [ 
https://issues.apache.org/jira/browse/OFBIZ-6654?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Gil Portenseigne updated OFBIZ-6654:

Attachment: (was: OFBIZ-6654.patch)

> Display of a recurrent workeffort in workeffort calendar do not respect 
> estimatedStart/CompletionDate
> -
>
> Key: OFBIZ-6654
> URL: https://issues.apache.org/jira/browse/OFBIZ-6654
> Project: OFBiz
>  Issue Type: Bug
>  Components: workeffort
>Affects Versions: Release Branch 12.04, Release Branch 13.07, Release 
> Branch 14.12, Trunk
>Reporter: Gil Portenseigne
>Assignee: Gil Portenseigne
> Fix For: 14.12.01, 12.04.06, 13.07.03, Upcoming Branch
>
> Attachments: OFBIZ-6654.patch, screenshot-1.png, screenshot-2.png
>
>
> I created DAILY_GRIND recurrent workeffort with estimated start date to 
> 2015-09-02 and estimated completion date to 2015-09-22. The task is displayed 
> every day in the month.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

buildbot failure in ASF Buildbot on ofbiz-branch14

[buildbot]

The Buildbot has detected a new failure on builder ofbiz-branch14 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch14/builds/18

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz14-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release14.12] 1701475
Blamelist: 

BUILD FAILED: failed

Sincerely,
 -The Buildbot

[jira] [Closed] (OFBIZ-5988) Can't perform multiple refund from Apache OFBiz Admin

[Jacques Le Roux (JIRA)]

 [ 
https://issues.apache.org/jira/browse/OFBIZ-5988?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jacques Le Roux closed OFBIZ-5988.
--
Resolution: Cannot Reproduce

> Can't perform multiple refund from Apache OFBiz Admin
> -
>
> Key: OFBIZ-5988
> URL: https://issues.apache.org/jira/browse/OFBIZ-5988
> Project: OFBiz
>  Issue Type: Bug
>Reporter: Prateek
>




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

buildbot success in ASF Buildbot on ofbiz-branch14

[buildbot]

The Buildbot has detected a restored build on builder ofbiz-branch14 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch14/builds/17

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz14-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release14.12] 1701166
Blamelist: 

Build succeeded!

Sincerely,
 -The Buildbot

buildbot success in ASF Buildbot on ofbiz-branch14

[buildbot]

The Buildbot has detected a restored build on builder ofbiz-branch14 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch14/builds/23

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz14-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release14.12] 1702550
Blamelist: 

Build succeeded!

Sincerely,
 -The Buildbot

buildbot failure in ASF Buildbot on ofbiz-branch12

[buildbot]

The Buildbot has detected a new failure on builder ofbiz-branch12 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch12/builds/16

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz12-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release12.04] 1702707
Blamelist: 

BUILD FAILED: failed compile_1

Sincerely,
 -The Buildbot

buildbot success in ASF Buildbot on ofbiz-branch13

[buildbot]

The Buildbot has detected a restored build on builder ofbiz-branch13 while 
building ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-branch13/builds/9

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz13-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/branches/release13.07] 1697995
Blamelist: 

Build succeeded!

Sincerely,
 -The Buildbot

buildbot failure in ASF Buildbot on ofbiz-trunk

[buildbot]

The Buildbot has detected a new failure on builder ofbiz-trunk while building 
ASF Buildbot. Full details are available at:
http://ci.apache.org/builders/ofbiz-trunk/builds/50

Buildbot URL: http://ci.apache.org/

Buildslave for this Build: lares_ubuntu

Build Reason: The AnyBranchScheduler scheduler named 'on-ofbiz-commit' 
triggered this build
Build Source Stamp: [branch ofbiz/trunk] 1697674
Blamelist: 

BUILD FAILED: failed

Sincerely,
 -The Buildbot