You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ofbiz.apache.org by "Vikas Mayur (JIRA)" <ji...@apache.org> on 2009/10/09 14:12:31 UTC

[jira] Closed: (OFBIZ-2430) Delete survey associated with a task

     [ https://issues.apache.org/jira/browse/OFBIZ-2430?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vikas Mayur closed OFBIZ-2430.
------------------------------

    Resolution: Fixed

Thanks Rohit,

Part of your patch that is applicable only for Secured URLs in FTL is in trunk rev. 823518

Also the changes are only applicable to trunk because this file does not exists in release09.04. 

Vikas

> Delete survey associated with a task
> ------------------------------------
>
>                 Key: OFBIZ-2430
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2430
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: specialpurpose/projectmgr
>    Affects Versions: SVN trunk
>            Reporter: Vikas Mayur
>            Assignee: Vikas Mayur
>             Fix For: SVN trunk
>
>         Attachments: DeleteSurveyAssociatedWithTask.patch
>
>
> Steps to reproduce this error:
> 1) Go to Project Manager app.
> 2) Select a project from the list. This will show up the project summary page.
> 3) Select any task from the Tasks screenlet. This will show up the task summary page.
> 4) Now click on the Surveys tab.
> 5) Add a survey (if there is not in the list).
> 6) Click on the Delete link and the error would be visible.
> Error log:
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [workEffortId] passed to secure (https) request-map with uri [deleteWorkEffortSurveyAppl] with an event that calls service [deleteWorkEffortSurveyAppl]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.