I just noticed the running server process, in my shell window displaying this:

select id from res_users where login='admin' and password='cleartextpassword' 
and active

Imagine that would be a production server, and someone with less access than me 
would be looking over my shoulder.

Is that something to fix in 5.0? (this is a 4.2.3.4 server)

(Some more context around this line:

select name from ir_module_module where state in ('installed', 'to 
upgrade', 'to remove')

Mon, 22 Dec 2008 15:22:29 ERROR:web-services:Exception in 
call: Traceback (most recent call last):
  File "/usr/lib/python2.5/site-packages/tinyerp-server/netsvc.py", line 
338, in run
    r=m(*msg[2:])
  File 
"/usr/lib/python2.5/site-packages/tinyerp-server/service/web_services.py", line 
329, in login
    res = security.login(db, login, password)
  File 
"/usr/lib/python2.5/site-packages/tinyerp-server/service/security.py", line 37, 
in login
    cr.execute('select id from res_users where login=%s and 
password=%s and active', (login.encode('utf-8'), 
password.encode('utf-8')))
  File "/usr/lib/python2.5/site-packages/tinyerp-server/sql_db.py", line 
73, in execute
    res = self.obj.execute(sql, p)
ProgrammingError: ERROR:  relation "res_users" does not exist

select id from res_users where login='admin' and password='secretsecret' and 
active

Mon, 22 Dec 2008 15:28:57 INFO:web-service:bad login or 
password from 'admin' using database 'terp'
Mon, 22 Dec 2008 15:29:14 INFO:web-service:bad login or 
password from 'admin' using database 'terp'
Mon, 22 Dec 2008 15:29:26 INFO:web-service:successful login 
from 'admin' using database 'terp'

rgds,
Reinier




-------------------- m2f --------------------

--
http://www.openerp.com/forum/viewtopic.php?p=27967#27967

-------------------- m2f --------------------


_______________________________________________
Tinyerp-users mailing list
http://tiny.be/mailman/listinfo/tinyerp-users

Reply via email to