[jira] Commented: (OFBIZ-4130) Tenant super user (tenant admin) can view all database details of all tenants

["Pierre Smits (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OFBIZ-4130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12984713#action_12984713 ] 

Pierre Smits commented on OFBIZ-4130:
-------------------------------------

Currently the tenant tables (tables Tenant and TenantDataSource), not the tables for the tenant, are accessed through delegator org.ofbiz.tenant. 
One solution is, that like other database tables, these tables will be accessed trhough the standard delegator org.ofbiz. The tenant admins (with FULLADMIN rights in the tenant environment) then can no longer see the data in the tables of the master databases. 

However, they then can create new data entries in the tables in their own tenant environment.

> Tenant super user (tenant admin) can view all database details of all tenants
> -----------------------------------------------------------------------------
>
>                 Key: OFBIZ-4130
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-4130
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: Release Branch 10.04, SVN trunk
>            Reporter: Pierre Smits
>             Fix For: Release Branch 10.04, SVN trunk
>
>
> When a new tenant is created and the super user of the tenant (the tenant-admin) logs in to WebTools and views the tables Tenant and TenantDataSource he/she can see all details of the tenant databases, incl TenantName, userID and password of the tenant databases.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.