midsuit
/
core-jgi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

IDEMPIERE-2483 Users can report on windows where they don't have access

This commit is contained in:
Carlos Ruiz 2015-02-25 10:24:42 -05:00
parent ac0845314c
commit be325f3b22
1 changed files with 25 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
org.adempiere.base/src/org/compiere/print/ReportEngine.java
View File

@ -72,6 +72,7 @@ import org.compiere.model.MPaySelectionCheck;
import org.compiere.model.MProject; import org.compiere.model.MProject;
import org.compiere.model.MQuery; import org.compiere.model.MQuery;
import org.compiere.model.MRfQResponse; import org.compiere.model.MRfQResponse;
import org.compiere.model.MRole;
import org.compiere.model.MTable; import org.compiere.model.MTable;
import org.compiere.model.PrintInfo; import org.compiere.model.PrintInfo;
@ -653,14 +654,7 @@ queued-job-count = 0 (class javax.print.attribute.standard.QueuedJobCount)
String value = pde.getValueDisplay(language); // formatted String value = pde.getValueDisplay(language); // formatted
if (pde.getColumnName().endsWith("_ID") && extension != null) if (pde.getColumnName().endsWith("_ID") && extension != null)
{ {
//link for column boolean isZoom = false;
a href = new a("javascript:void(0)");
href.setID(pde.getColumnName() + "_" + row + "_a");
td.addElement(href);
href.addElement(Util.maskHTML(value));
if (cssPrefix != null)
href.setClass(cssPrefix + "-href");
if (item.getColumnName().equals("Record_ID")) { if (item.getColumnName().equals("Record_ID")) {
Object tablePDE = m_printData.getNode("AD_Table_ID"); Object tablePDE = m_printData.getNode("AD_Table_ID");
if (tablePDE != null && tablePDE instanceof PrintDataElement) { if (tablePDE != null && tablePDE instanceof PrintDataElement) {
@ -674,11 +668,33 @@ queued-job-count = 0 (class javax.print.attribute.standard.QueuedJobCount)
MTable mTable = MTable.get(getCtx(), tableID); MTable mTable = MTable.get(getCtx(), tableID);
String foreignColumnName = mTable.getTableName() + "_ID"; String foreignColumnName = mTable.getTableName() + "_ID";
pde.setForeignColumnName(foreignColumnName); pde.setForeignColumnName(foreignColumnName);
extension.extendIDColumn(row, td, href, pde); isZoom = true;
} }
} }
} else { } else {
isZoom = true;
}
if (isZoom) {
// check permission on the zoomed window
MTable mTable = MTable.get(getCtx(), pde.getForeignColumnName().substring(0, pde.getForeignColumnName().length()-3));
int Record_ID = Integer.parseInt(pde.getValueAsString());
int AD_Window_ID = Env.getZoomWindowID(mTable.get_ID(), Record_ID);
Boolean canAccess = MRole.getDefault().getWindowAccess(AD_Window_ID);
if (canAccess == null) {
isZoom = false;
}
}
if (isZoom) {
//link for column
a href = new a("javascript:void(0)");
href.setID(pde.getColumnName() + "_" + row + "_a");
td.addElement(href);
href.addElement(Util.maskHTML(value));
if (cssPrefix != null)
href.setClass(cssPrefix + "-href");
extension.extendIDColumn(row, td, href, pde); extension.extendIDColumn(row, td, href, pde);
} else {
td.addElement(Util.maskHTML(value));
} }
} }