Re: help with updateProductPrice

2018-04-16 Thread Rajesh Mallah
Hello Mr Deepak , Thanks for the response . The record does exists but i guess i am not specifying the params good enough to hit the record by pkey. I wish there were a "product_price_id" in ProductPrice entity. :-) regds mallah. On Tue, Apr 17, 2018 at 9:58 AM, Deepak Dixit

Re: help with updateProductPrice

2018-04-16 Thread Rajesh Mallah
Thanks . This is possibly the reason , shall check and confirm. However it is difficult to match datetime fields *exactly* when integrating external systems . regds mallah. On Tue, Apr 17, 2018 at 10:25 AM, Akash Jain wrote: > Hello Mallah, > > As you want to

Re: help with updateProductPrice

2018-04-16 Thread Akash Jain
Hello Mallah, As you want to update product price then all primary key (productId, fromDate, currencyUomId, productPricePurposeId, productPriceTypeId and productStoreGroupId) of ProductPrice should be matched (A ProductPrice record should exist with all matching primary key you passed).

[MODERATE EMAIL] Wiki edit request

2018-04-16 Thread Deepak Dixit
Hi Mathieu Lirzin, Your email has been moderated, please subscribe mailing list http://ofbiz.apache.org/mailing-lists.html Regarding wiki edit access, Please refer Wiki access Thanks & Regards -- Deepak Dixit Director of Product Engineering HotWax

Re: help with updateProductPrice

2018-04-16 Thread Deepak Dixit
Hi Rajesh, If you want to create product price you should use createProductPrice service, https://demo-stable.ofbiz.apache.org/webtools/control/ServiceList?sel_service_name=createProductPrice If productPrice record already exists you should use updateProductPrice, Thanks & Regards -- Deepak

Re: How to resolve CSRF attack

2018-04-16 Thread Chris Clark
What does yoyr message has been moderated mean? On Mon, Apr 16, 2018, 3:00 AM Sonali Agrahari, wrote: > Hello all, > > I am using OFBiz 12.04 version in my application. > When logged in to the application as admin user and open web mail in > another browser ,

Re: How to resolve CSRF attack

2018-04-16 Thread Paul Foxworthy
Hi Michael, I would say it is a vulnerability. OFBiz could make this distinction if we add a hidden field to each form with a unique hash, and verify the hash is correct when processing a POST. A spoofed form wouldn't have the right hash. We are already using some of the OWASP (Open Web

help with updateProductPrice

2018-04-16 Thread Rajesh Mallah
Hi , I am calling https://demo-stable.ofbiz.apache.org/webtools/control/ServiceList?sel_service_name=updateProductPrice with ARGS { currencyUomId "INR", fromDate"2018-04-16 17:39:52", price 150, productId

Re: 答复: usage of product attributes

2018-04-16 Thread Rajesh Mallah
Hi Schumann , I was wanting MOQ ( minimum order quantity ) for the purpose of selling the product. The MOQ under suppliers of product is for purchase. It does not hurt me in current application. Hence i am using product attribute only. regds mallah. On Mon, Apr 16, 2018 at 6:30 AM, Schumann

RE: Price Rule Engine

2018-04-16 Thread james
I am sure there has to be a way to genrerate a price rule without always adding and subtracting to or from List Price. What if I wanted to at cost plus? Or wholesale minus? Or a discount against the gross margin? Or what if I wanted to sell at the default price list or just sell at the

Re: How to resolve CSRF attack

2018-04-16 Thread Michael Brohl
Hi Sonali, this is not a vulnerability. You are logged in and posting a request from the same browser with the same session. There is no chance for OFBiz to make a distiction between a request initiated from an OFBiz generated page or any other page (like your webmail) from the same

Re: How to resolve CSRF attack

2018-04-16 Thread Jacques Le Roux
Hi Sonali, Your last email has been moderated again http://ofbiz.135035.n4.nabble.com/MODERATE-EMAIL-How-to-resolve-CSRF-attack-td4721783.html The 1st one being https://markmail.org/message/jmkabexchsb7cvl2 4 months ago. Please, as Nabble also suggests you, consider to subscribe to the user ML

How to resolve CSRF attack

2018-04-16 Thread Sonali Agrahari
Hello all, I am using OFBiz 12.04 version in my application. When logged in to the application as admin user and open web mail in another browser , suppose we received a mail which have link http://xyz.com/activate.html . The links points to html file as :

OFBiz Blog - March 2018 Update

2018-04-16 Thread Sharan Foga
Hi Everyone You can find the details of our monthly blog update at the link below:: https://s.apache.org/Hj05 Thanks to Michael, Jacques and Pranay for their continued support in reviewing, providing feedback and helping preparing it. Thanks Sharan