[ANNOUNCE] Apache OFBiz 11.04.05 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache OFBiz 
11.04.05".

Apache OFBiz is an open source enterprise automation software project (ERP, 
CRM, E-Business / E-Commerce, MRP, SCM, CMMS/EAM...):

http://ofbiz.apache.org/

"Apache OFBiz 11.04.05" is a bug fix release for the 11.04 series; all users of 
previous releases are encouraged to upgrade to this latest release (or migrate 
to the 12.04 series) because it contains several bug fixes including fixes for 
the following security vulnerability:

http://ofbiz.apache.org/download.html#vulnerabilities

This release may be the last one in this series: start planning to migrate to 
the 12.04 series.

The release file can be downloaded following the instructions in the OFBiz 
download page :

http://ofbiz.apache.org/download.html

The OFBiz Team.


signature.asc
Description: Message signed with OpenPGP using GPGMail

[ANNOUNCE] Apache OFBiz 12.04.04 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache OFBiz 
12.04.04".

Apache OFBiz is an open source enterprise automation software project (ERP, 
CRM, E-Business / E-Commerce, MRP, SCM, CMMS/EAM...):

http://ofbiz.apache.org/

"Apache OFBiz 12.04.04" is a bug fix release for the 12.04 series; all users of 
previous releases are encouraged to upgrade to this latest release because it 
contains several bug fixes including fixes for the following security 
vulnerability:

http://ofbiz.apache.org/download.html#vulnerabilities

The release file can be downloaded following the instructions in the OFBiz 
download page :

http://ofbiz.apache.org/download.html

The OFBiz Team.


signature.asc
Description: Message signed with OpenPGP using GPGMail

[CVE-2014-0232] Apache OFBiz Cross-site scripting (XSS) vulnerability

[Jacopo Cappellato]

CVE-2014-0232: Apache OFBiz Cross-site scripting (XSS) vulnerability

Severity: Important

Vendor:
The Apache Software Foundation

Versions Affected:
Apache OFBiz 11.04.01 to 11.04.04
Apache OFBiz 12.04.01 to 11.04.03
The unsupported Apache OFBiz 09.04.x, 10.04.x versions may be also affected


Description:
Result and error messages returned by some OFBiz services could be a vector for 
XSS attacks.

Mitigation:
11.04.x users should upgrade to 11.04.05
12.04.x users should upgrade to 12.04.04

http://svn.apache.org/r1608698

Credit:
This issue was discovered by Gregory Draperi.

References:

http://ofbiz.apache.org/download.html#vulnerabilities



signature.asc
Description: Message signed with OpenPGP using GPGMail

Re: Marketing Page and OfBiz.org

[Jacques Le Roux]

Le 18/08/2014 23:37, Ron Wheeler a écrit :

Should OfBiz.org still be used or is it no longer the right 
name/logo/URL/product identifier?


No, it's now ofbiz.apache.org



If it is no longer to be used, we should archive the logo files and get them 
out of circulation.


Agreed


If it is used inside a text, the text should be changed or marked as requiring 
changes.


This needs more investigation and I have no time for that atm. I suppose there are no longer much uses (this dates from 2006). Most rests should be in 
wiki, if not only there.


Jacques



Ron


On 18/08/2014 4:51 PM, Jacques Le Roux wrote:


Le 15/08/2014 22:48, Ron Wheeler a écrit :

On 15/08/2014 4:31 PM, Jacques Le Roux wrote:


Le 14/08/2014 17:27, Ron Wheeler a écrit :
https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=7766031 has nothing on it except a link to another page. with the same title at 
https://cwiki.apache.org/confluence/display/OFBIZ/General+Information+Material.


However it is referenced by 
https://cwiki.apache.org/confluence/display/OFBADMIN/Home.
Would it not make sense to delete change this reference to the page with theh content 
(https://cwiki.apache.org/confluence/display/OFBIZ/General+Information+Material) and delete the page with no content.


Ron



Beware, 
https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=7766031 has 16 
attachments...

Jacques


Good point.
The files are all pretty old.
Any reason why the 
https://cwiki.apache.org/confluence/display/OFBIZ/General+Information+Material 
page was added.
It seems to overlap with the files attached to this page.


This page has been added by Paul at his own initiative. It was an effort to collect all the Marketing material in one place. Then he did not move 
files from the old page (the attached ones).

What we could do is moving the attachments we want to keep from the old page 
and remove the old page.


Are logos and marketing materials that use OfBiz.org worth keeping in the "active 
area" of the wiki?


Where would you put them else?


Are their any circumstances in which a new marketing doc should refer to 
ofbiz.org?


Any ideas :D (it's late here)

Jacques



Ron

Re: Marketing Page and OfBiz.org

[Jacques Le Roux]

Le 19/08/2014 11:14, Jacques Le Roux a écrit :


Le 18/08/2014 23:37, Ron Wheeler a écrit :

Should OfBiz.org still be used or is it no longer the right 
name/logo/URL/product identifier?


No, it's now ofbiz.apache.org


Note: there is of course a redirection from ofbiz.org to ofbiz.apache.org





If it is no longer to be used, we should archive the logo files and get them 
out of circulation.


Agreed


If it is used inside a text, the text should be changed or marked as requiring 
changes.


This needs more investigation and I have no time for that atm. I suppose there are no longer much uses (this dates from 2006). Most rests should be 
in wiki, if not only there.


Jacques



Ron


On 18/08/2014 4:51 PM, Jacques Le Roux wrote:


Le 15/08/2014 22:48, Ron Wheeler a écrit :

On 15/08/2014 4:31 PM, Jacques Le Roux wrote:


Le 14/08/2014 17:27, Ron Wheeler a écrit :
https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=7766031 has nothing on it except a link to another page. with the same title 
at https://cwiki.apache.org/confluence/display/OFBIZ/General+Information+Material.


However it is referenced by 
https://cwiki.apache.org/confluence/display/OFBADMIN/Home.
Would it not make sense to delete change this reference to the page with theh content 
(https://cwiki.apache.org/confluence/display/OFBIZ/General+Information+Material) and delete the page with no content.


Ron



Beware, 
https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=7766031 has 16 
attachments...

Jacques


Good point.
The files are all pretty old.
Any reason why the 
https://cwiki.apache.org/confluence/display/OFBIZ/General+Information+Material 
page was added.
It seems to overlap with the files attached to this page.


This page has been added by Paul at his own initiative. It was an effort to collect all the Marketing material in one place. Then he did not move 
files from the old page (the attached ones).

What we could do is moving the attachments we want to keep from the old page 
and remove the old page.


Are logos and marketing materials that use OfBiz.org worth keeping in the "active 
area" of the wiki?


Where would you put them else?


Are their any circumstances in which a new marketing doc should refer to 
ofbiz.org?


Any ideas :D (it's late here)

Jacques



Ron

Re: [ANNOUNCE] Apache OFBiz 11.04.05 released

[Pierre Smits]

Congratulations team,

I have communicated this bug-fix release to the 'tweakers.net' organisation
for inclusion in their news feed'. Tweakers.net is a Dutch new site
regarding hardware and software technologies.

Best regards,

Pierre Smits

*ORRTIZ.COM *
Services & Solutions for Cloud-
Based Manufacturing, Professional
Services and Retail & Trade
http://www.orrtiz.com


On Tue, Aug 19, 2014 at 10:04 AM, Jacopo Cappellato 
wrote:

> The Apache OFBiz community is pleased to announce the new release "Apache
> OFBiz 11.04.05".
>
> Apache OFBiz is an open source enterprise automation software project
> (ERP, CRM, E-Business / E-Commerce, MRP, SCM, CMMS/EAM...):
>
> http://ofbiz.apache.org/
>
> "Apache OFBiz 11.04.05" is a bug fix release for the 11.04 series; all
> users of previous releases are encouraged to upgrade to this latest release
> (or migrate to the 12.04 series) because it contains several bug fixes
> including fixes for the following security vulnerability:
>
> http://ofbiz.apache.org/download.html#vulnerabilities
>
> This release may be the last one in this series: start planning to migrate
> to the 12.04 series.
>
> The release file can be downloaded following the instructions in the OFBiz
> download page :
>
> http://ofbiz.apache.org/download.html
>
> The OFBiz Team.
>

Re: [ANNOUNCE] Apache OFBiz 12.04.04 released

[Pierre Smits]

Congratulations team,

I have communicated this bug-fix release to the 'tweakers.net' organisation
for inclusion in their news feed'. Tweakers.net is a Dutch new site
regarding hardware and software technologies.

Best regards,

Pierre Smits

*ORRTIZ.COM *
Services & Solutions for Cloud-
Based Manufacturing, Professional
Services and Retail & Trade
http://www.orrtiz.com


On Tue, Aug 19, 2014 at 10:05 AM, Jacopo Cappellato 
wrote:

> The Apache OFBiz community is pleased to announce the new release "Apache
> OFBiz 12.04.04".
>
> Apache OFBiz is an open source enterprise automation software project
> (ERP, CRM, E-Business / E-Commerce, MRP, SCM, CMMS/EAM...):
>
> http://ofbiz.apache.org/
>
> "Apache OFBiz 12.04.04" is a bug fix release for the 12.04 series; all
> users of previous releases are encouraged to upgrade to this latest release
> because it contains several bug fixes including fixes for the following
> security vulnerability:
>
> http://ofbiz.apache.org/download.html#vulnerabilities
>
> The release file can be downloaded following the instructions in the OFBiz
> download page :
>
> http://ofbiz.apache.org/download.html
>
> The OFBiz Team.
>

Deleting Product from Catalog

[Integrin]

Hi Ofbiz Users,

- It appears there is no service method available to delete a product from
catalog
- Is this by design?
- What is the recommended best practice to logically delete a product from
catalog that was created in error?
- Thanks in advance for any pointers

Regards

Re: Deleting Product from Catalog

[Pierre Smits]

Yes, it is by design, given the many dependencies. But you can expire
products.

Regards,

Pierre Smits

*ORRTIZ.COM *
Services & Solutions for Cloud-
Based Manufacturing, Professional
Services and Retail & Trade
http://www.orrtiz.com


On Tue, Aug 19, 2014 at 12:18 PM, Integrin  wrote:

> Hi Ofbiz Users,
>
> - It appears there is no service method available to delete a product from
> catalog
> - Is this by design?
> - What is the recommended best practice to logically delete a product from
> catalog that was created in error?
> - Thanks in advance for any pointers
>
> Regards
>

Re: Deleting Product from Catalog

[Rong Nguyen]

Hi Integrin,


> - It appears there is no service method available to delete a product from
> catalog

>> YES

> - Is this by design?

>> YES

- What is the recommended best practice to logically delete a product from
catalog that was created in error?

>> You can do it by setting thruDate of product to the date you want to
>> delete.



-
Rong Nguyen

Olbius JSC
Deliver highest business value
http://www.olbius.com/
--
View this message in context: 
http://ofbiz.135035.n4.nabble.com/Deleting-Product-from-Catalog-tp4654023p4654027.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: Deleting Product from Catalog

[Sumit Pandit]

Dear,

Term "Delete"! I would say 'unassociate'. 

First thing as per design, product could not directly associate with Catalog. 
Catalog is associated to category and category is associated with products. It 
is the way how a product is associated with catalog.

Therefore you could not find any direct link(or service) at catalog screen to 
unassociate product from catalog.

You have to delete/expire product with category under selected catalog to not 
to be shown in catalog.


--
Thanks & Regards
Sumit Pandit
Solution Architect, Digital Software Solutions Group
Tata Consultancy Services
Work Phone Number: 124 6101145
Cell Number: Pri +919212246407/Sec +917503046188
BUZZ/VOIP: 4141145
Mail to: sumit.pan...@tcs.com
Web site: www.tcs.com




- Original Message -
| From: "Rong Nguyen" 
| To: user@ofbiz.apache.org
| Sent: Tuesday, August 19, 2014 3:54:40 PM
| Subject: Re: Deleting Product from Catalog
| 
| Hi Integrin,
| 
| 
| > - It appears there is no service method available to delete a
| > product from
| > catalog
| 
| >> YES
| 
| > - Is this by design?
| 
| >> YES
| 
| - What is the recommended best practice to logically delete a product
| from
| catalog that was created in error?
| 
| >> You can do it by setting thruDate of product to the date you want
| >> to
| >> delete.
| 
| 
| 
| -
| Rong Nguyen
| 
| Olbius JSC
| Deliver highest business value
| http://www.olbius.com/
| --
| View this message in context:
| 
http://ofbiz.135035.n4.nabble.com/Deleting-Product-from-Catalog-tp4654023p4654027.html
| Sent from the OFBiz - User mailing list archive at Nabble.com.
| 
=-=-=
Notice: The information contained in this e-mail
message and/or attachments to it may contain 
confidential or privileged information. If you are 
not the intended recipient, any dissemination, use, 
review, distribution, printing or copying of the 
information contained in this e-mail message 
and/or attachments to it are strictly prohibited. If 
you have received this communication in error, 
please notify us by reply e-mail or telephone and 
immediately and permanently delete the message 
and any attachments. Thank you

Re: Deleting Product from Catalog

[Integrin]

Thanks all for the pointers,

@Rong Nguyen, i could not find thruDate in the "Product" entity, is it by
any chance release_date? if it is any other field for expiring product
please advise

Regards



On Tue, Aug 19, 2014 at 6:29 AM, Sumit Pandit  wrote:

> Dear,
>
> Term "Delete"! I would say 'unassociate'.
>
> First thing as per design, product could not directly associate with
> Catalog. Catalog is associated to category and category is associated with
> products. It is the way how a product is associated with catalog.
>
> Therefore you could not find any direct link(or service) at catalog screen
> to unassociate product from catalog.
>
> You have to delete/expire product with category under selected catalog to
> not to be shown in catalog.
>
>
> --
> Thanks & Regards
> Sumit Pandit
> Solution Architect, Digital Software Solutions Group
> Tata Consultancy Services
> Work Phone Number: 124 6101145
> Cell Number: Pri +919212246407/Sec +917503046188
> BUZZ/VOIP: 4141145
> Mail to: sumit.pan...@tcs.com
> Web site: www.tcs.com
> 
>
>
>
> - Original Message -
> | From: "Rong Nguyen" 
> | To: user@ofbiz.apache.org
> | Sent: Tuesday, August 19, 2014 3:54:40 PM
> | Subject: Re: Deleting Product from Catalog
> |
> | Hi Integrin,
> |
> |
> | > - It appears there is no service method available to delete a
> | > product from
> | > catalog
> |
> | >> YES
> |
> | > - Is this by design?
> |
> | >> YES
> |
> | - What is the recommended best practice to logically delete a product
> | from
> | catalog that was created in error?
> |
> | >> You can do it by setting thruDate of product to the date you want
> | >> to
> | >> delete.
> |
> |
> |
> | -
> | Rong Nguyen
> |
> | Olbius JSC
> | Deliver highest business value
> | http://www.olbius.com/
> | --
> | View this message in context:
> |
> http://ofbiz.135035.n4.nabble.com/Deleting-Product-from-Catalog-tp4654023p4654027.html
> | Sent from the OFBiz - User mailing list archive at Nabble.com.
> |
> =-=-=
> Notice: The information contained in this e-mail
> message and/or attachments to it may contain
> confidential or privileged information. If you are
> not the intended recipient, any dissemination, use,
> review, distribution, printing or copying of the
> information contained in this e-mail message
> and/or attachments to it are strictly prohibited. If
> you have received this communication in error,
> please notify us by reply e-mail or telephone and
> immediately and permanently delete the message
> and any attachments. Thank you
>
>
>

Re: Deleting Product from Catalog

[Rong Nguyen]

@Integrin Solutions: You can set thruDate for the link between product and
others(Category,...)

You can delete by using SQL to DB, or create your own service, but in
general it's not good(Entity relational,...)!



-
Rong Nguyen

Olbius JSC
Deliver highest business value
http://www.olbius.com/
--
View this message in context: 
http://ofbiz.135035.n4.nabble.com/Deleting-Product-from-Catalog-tp4654023p4654034.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: Marketing Page and OfBiz.org

[Ron Wheeler]

On 19/08/2014 5:14 AM, Jacques Le Roux wrote:


Le 18/08/2014 23:37, Ron Wheeler a écrit :
Should OfBiz.org still be used or is it no longer the right 
name/logo/URL/product identifier?


No, it's now ofbiz.apache.org



If it is no longer to be used, we should archive the logo files and 
get them out of circulation.


Agreed


Perfect.

If it is used inside a text, the text should be changed or marked as 
requiring changes.


This needs more investigation and I have no time for that atm. I 
suppose there are no longer much uses (this dates from 2006). Most 
rests should be in wiki, if not only there.
I was not proposing an action item for you but just seeking a policy 
statement so that Sharan and I can at least flag documents that need 
changing, if we come across them.


Your input is perfect for our current needs.

Merci beaucoup.

Meilleures salutations.

Ron



Jacques



Ron


On 18/08/2014 4:51 PM, Jacques Le Roux wrote:


Le 15/08/2014 22:48, Ron Wheeler a écrit :

On 15/08/2014 4:31 PM, Jacques Le Roux wrote:


Le 14/08/2014 17:27, Ron Wheeler a écrit :
https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=7766031 
has nothing on it except a link to another page. with the same 
title at 
https://cwiki.apache.org/confluence/display/OFBIZ/General+Information+Material.


However it is referenced by 
https://cwiki.apache.org/confluence/display/OFBADMIN/Home.
Would it not make sense to delete change this reference to the 
page with theh content 
(https://cwiki.apache.org/confluence/display/OFBIZ/General+Information+Material) 
and delete the page with no content.


Ron



Beware, 
https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=7766031 
has 16 attachments...


Jacques


Good point.
The files are all pretty old.
Any reason why the 
https://cwiki.apache.org/confluence/display/OFBIZ/General+Information+Material 
page was added.

It seems to overlap with the files attached to this page.


This page has been added by Paul at his own initiative. It was an 
effort to collect all the Marketing material in one place. Then he 
did not move files from the old page (the attached ones).
What we could do is moving the attachments we want to keep from the 
old page and remove the old page.


Are logos and marketing materials that use OfBiz.org worth keeping 
in the "active area" of the wiki?


Where would you put them else?

Are their any circumstances in which a new marketing doc should 
refer to ofbiz.org?


Any ideas :D (it's late here)

Jacques



Ron













--
Ron Wheeler
President
Artifact Software Inc
email: rwhee...@artifact-software.com
skype: ronaldmwheeler
phone: 866-970-2435, ext 102

Re: Deleting Product from Catalog

[Jacques Le Roux]

Le 19/08/2014 13:08, Rong Nguyen a écrit :

@Integrin Solutions: You can set thruDate for the link between product and
others(Category,...)

You can delete by using SQL to DB, or create your own service, but in
general it's not good(Entity relational,...)!


Another underlying reason is possible auditing. So you could still create SQL scripts to remove your products. But in case you are in need of history, 
it good to keep things ready for that...


Jacques




-
Rong Nguyen

Olbius JSC
Deliver highest business value
http://www.olbius.com/
--
View this message in context: 
http://ofbiz.135035.n4.nabble.com/Deleting-Product-from-Catalog-tp4654023p4654034.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: LookupProduct

[jfrad...@styleline.com]

When a user views the look-up product for supplier he sees multiple entries
for the same product with no difference in the presented data (except
perhaps min order qty). This is very confusing.
At a minimum I feel it should be a distinct. I chose to only have each
product once, and use the most recent record so it has the min order qty
from the last received. I appreciate the explanation.



-
Joel Fradkin
--
View this message in context: 
http://ofbiz.135035.n4.nabble.com/LookupProduct-tp4653978p4654041.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

Re: Deleting Product from Catalog

[Integrin]

- Good point Jacques,
- Will expire the products and keep it in the system
- Thanks all for the pointers

Regards


On Tue, Aug 19, 2014 at 9:56 AM, Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:

> Le 19/08/2014 13:08, Rong Nguyen a écrit :
>
>  @Integrin Solutions: You can set thruDate for the link between product and
>> others(Category,...)
>>
>> You can delete by using SQL to DB, or create your own service, but in
>> general it's not good(Entity relational,...)!
>>
>
> Another underlying reason is possible auditing. So you could still create
> SQL scripts to remove your products. But in case you are in need of
> history, it good to keep things ready for that...
>
> Jacques
>
>
>
>>
>> -
>> Rong Nguyen
>>
>> Olbius JSC
>> Deliver highest business value
>> http://www.olbius.com/
>> --
>> View this message in context: http://ofbiz.135035.n4.nabble.
>> com/Deleting-Product-from-Catalog-tp4654023p4654034.html
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>>

Re: LookupProduct

[Jacques Le Roux]

Did you get my answer?

Jacques

Le 19/08/2014 16:04, jfrad...@styleline.com a écrit :

When a user views the look-up product for supplier he sees multiple entries
for the same product with no difference in the presented data (except
perhaps min order qty). This is very confusing.
At a minimum I feel it should be a distinct. I chose to only have each
product once, and use the most recent record so it has the min order qty
from the last received. I appreciate the explanation.



-
Joel Fradkin
--
View this message in context: 
http://ofbiz.135035.n4.nabble.com/LookupProduct-tp4653978p4654041.html
Sent from the OFBiz - User mailing list archive at Nabble.com.

OFBiz demos can't be restarted

[Jacques Le Roux]

https://issues.apache.org/jira/browse/INFRA-8215

Jacques

Re: OFBiz demos can't be restarted

[Jacques Le Roux]

Forget it, was my bad, I'm currently restarting the demos...

Jacques

Le 19/08/2014 22:50, Jacques Le Roux a écrit :

https://issues.apache.org/jira/browse/INFRA-8215

Jacques