You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ofbiz.apache.org by "Rene Frauli (JIRA)" <ji...@apache.org> on 2012/11/14 08:48:12 UTC
[jira] [Created] (OFBIZ-5072) Tenant authentication problem
Rene Frauli created OFBIZ-5072:
----------------------------------
Summary: Tenant authentication problem
Key: OFBIZ-5072
URL: https://issues.apache.org/jira/browse/OFBIZ-5072
Project: OFBiz
Issue Type: Bug
Components: ALL COMPONENTS
Affects Versions: Release Branch 12.04
Reporter: Rene Frauli
In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
store the delegator, dispatcher, security and the authz in the session
only in the request.
The effect is that the session for the tenant is not correct and the
tenant cannot be used at all with strange effects. For e.g. data are
stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (OFBIZ-5072) Tenant authentication problem
Posted by "Adrian Crum (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13496949#comment-13496949 ]
Adrian Crum commented on OFBIZ-5072:
------------------------------------
The LoginWorker behavior was changed in rev 1353681, and it was intended to fix OFBIZ-4289. So, we will need to investigate the impact of returning the code to its original state.
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Fix For: SVN trunk, Release Branch 12.04
>
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (OFBIZ-5072) Tenant authentication problem
Posted by "Rene Frauli (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13497101#comment-13497101 ]
Rene Frauli commented on OFBIZ-5072:
------------------------------------
Jacopo,
I will test it and give you a feedback.
Rene
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Assignee: Jacopo Cappellato
> Fix For: SVN trunk, Release Branch 12.04
>
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (OFBIZ-5072) Tenant authentication problem
Posted by "Jacopo Cappellato (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13500304#comment-13500304 ]
Jacopo Cappellato commented on OFBIZ-5072:
------------------------------------------
Thanks Rene,
a slightly different version of your patch is now committed to trunk with rev. 1411196 and to release 12.04 with rev. 1411245
I hope I will find some more time to review the multi tenant code and improve some of its parts but for now this change should be enough.
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Assignee: Jacopo Cappellato
> Fix For: SVN trunk, Release Branch 12.04
>
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (OFBIZ-5072) Tenant authentication problem
Posted by "Rene Frauli (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13499115#comment-13499115 ]
Rene Frauli commented on OFBIZ-5072:
------------------------------------
I have tried to reproduce the issue with the current trunk with success.
So it's not only a problem of backporting to 12.04.
You can easily reproduce it with the following steps:
1. Load Demo
2. Load Demo Multitenant
3. Start
4. Login as tenant with admin / ofbiz / DEMO1
5. Go to Party and open details from admin
6. change password from user login admin to for e.g. test1
7. logout
8. try to login with admin / test1 / DEMO1
Now you will get an error, because the password is wrong.
When you try to login with admin / test1 without tenant it works.
So that means the password was not changed for the tenant admin, it was changed for the general admin.
Rene
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Assignee: Jacopo Cappellato
> Fix For: SVN trunk, Release Branch 12.04
>
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (OFBIZ-5072) Tenant authentication problem
Posted by "Adrian Crum (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Adrian Crum updated OFBIZ-5072:
-------------------------------
Component/s: (was: ALL COMPONENTS)
framework
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Fix For: SVN trunk, Release Branch 12.04
>
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (OFBIZ-5072) Tenant authentication problem
Posted by "Adrian Crum (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Adrian Crum updated OFBIZ-5072:
-------------------------------
Fix Version/s: Release Branch 12.04
SVN trunk
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Fix For: SVN trunk, Release Branch 12.04
>
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (OFBIZ-5072) Tenant authentication problem
Posted by "Rene Frauli (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13496956#comment-13496956 ]
Rene Frauli commented on OFBIZ-5072:
------------------------------------
I understand the need for the change, but it's not possible to work with tenants without returning the code.
Hope you will find a solution that solve both.
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Fix For: SVN trunk, Release Branch 12.04
>
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (OFBIZ-5072) Tenant authentication problem
Posted by "Rene Frauli (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Rene Frauli updated OFBIZ-5072:
-------------------------------
Attachment: LoginWorker.java.patch
In comparison to 11.04 if added the missing lines to add the delegator, dispatcher, security and authz also to the session and now the tenant is working correct again.
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: ALL COMPONENTS
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Assigned] (OFBIZ-5072) Tenant authentication problem
Posted by "Jacopo Cappellato (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jacopo Cappellato reassigned OFBIZ-5072:
----------------------------------------
Assignee: Jacopo Cappellato
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Assignee: Jacopo Cappellato
> Fix For: SVN trunk, Release Branch 12.04
>
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (OFBIZ-5072) Tenant authentication problem
Posted by "Jacopo Cappellato (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13497099#comment-13497099 ]
Jacopo Cappellato commented on OFBIZ-5072:
------------------------------------------
Rene,
could you please test the same on trunk and let us know what the result is?
I suspect it could work there (but not sure) and if I am right then the issue could be related to an incomplete/improper backporting to 12.04 of this change.
Thanks
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Assignee: Jacopo Cappellato
> Fix For: SVN trunk, Release Branch 12.04
>
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Closed] (OFBIZ-5072) Tenant authentication problem
Posted by "Jacopo Cappellato (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/OFBIZ-5072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jacopo Cappellato closed OFBIZ-5072.
------------------------------------
> Tenant authentication problem
> -----------------------------
>
> Key: OFBIZ-5072
> URL: https://issues.apache.org/jira/browse/OFBIZ-5072
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Release Branch 12.04
> Reporter: Rene Frauli
> Assignee: Jacopo Cappellato
> Fix For: SVN trunk, Release Branch 12.04
>
> Attachments: LoginWorker.java.patch
>
>
> In 12.04 the LoginWorker method "setWebContextObjects" object doesn't
> store the delegator, dispatcher, security and the authz in the session
> only in the request.
> The effect is that the session for the tenant is not correct and the
> tenant cannot be used at all with strange effects. For e.g. data are
> stored with the default delegator.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira