[jira] [Commented] (OFBIZ-4130) Tenant super user (tenant admin) can view all database details of all tenants

["Jacques Le Roux (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OFBIZ-4130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13911645#comment-13911645 ] 

Jacques Le Roux commented on OFBIZ-4130:
----------------------------------------

Pierre told me

bq. Way to test is: first create 2 new tenants with ./ant create-tenant and login as  the super user of one. Go to tenantdatasource and observe that you'll see all sources. Apply patch, and log in again. Observe that you can't see the tenantdatasource.

> Tenant super user (tenant admin) can view all database details of all tenants
> -----------------------------------------------------------------------------
>
>                 Key: OFBIZ-4130
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-4130
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: Release Branch 10.04, Release Branch 11.04, SVN trunk, Release Branch 12.04, Release Branch 13.07
>            Reporter: Pierre Smits
>            Priority: Critical
>             Fix For: Release Branch 10.04, Release Branch 11.04, SVN trunk, Release 11.04.01, Release Branch 12.04, Release Branch 13.07
>
>         Attachments: OFBIZ-4130-MultiTenant-visibilty.patch
>
>
> When a new tenant is created and the super user of the tenant (the tenant-admin) logs in to WebTools and views the tables Tenant and TenantDataSource he/she can see all details of the tenant databases, incl TenantName, userID and password of the tenant databases.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)