I'm testing my new store, when I decide to login as a user and cancel
an order (which is suppose to work). The user sees this: The Following Errors Occurred: Error calling event: org.ofbiz.webapp.event.EventHandlerException: Service invocation error (Could not commit transaction for service [cancelOrderItem] call: Roll back error, could not commit transaction, was rolled back instead because of: Error in simple-method [Auto create OrderAdjustments [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: ; [Security Error To Run Auto Create Order Adjustments]) Odd. Looking further, I discover that a bug was submitted back in OCT09, priority MAJOR, with a patch, and verified: https://issues.apache.org/jira/browse/OFBIZ-3075 Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, the reason I chose 9.04 is because it is suppose to be the golden build, patched as required, rock solid. All new users are directed to 9.04. The bug actually exposes my INTERNAL paths! So I have to ask. What else???? |
Each release is only as good as the community makes it. Community is the key word here, nobody gets paid to make sure Mike Z is downloading a bug free release.
My guess is that most implementations have chosen not to allow customer's to cancel their orders and hence the bug doesn't concern them. If it concerns you then download the patch, test it, report the results and eventually a committer will find some spare time to look at it and possibly commit it. What else? Possibly plenty else. You can view the reported unresolved bugs by release in jira and you'll also need to be open to the possibility that there are other unreported bugs. It is up to users of the release like yourself to test the features that you need working and if they aren't then report them. Like I said, the release is only as good as the community makes it. Regards Scott HotWax Media http://www.hotwaxmedia.com On 15/07/2010, at 4:55 AM, Mike Z wrote: > I'm testing my new store, when I decide to login as a user and cancel > an order (which is suppose to work). The user sees this: > > The Following Errors Occurred: > Error calling event: org.ofbiz.webapp.event.EventHandlerException: > Service invocation error (Could not commit transaction for service > [cancelOrderItem] call: Roll back error, could not commit transaction, > was rolled back instead because of: Error in simple-method [Auto > create OrderAdjustments > [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: > ; [Security Error To Run Auto Create Order Adjustments]) > > Odd. Looking further, I discover that a bug was submitted back in > OCT09, priority MAJOR, with a patch, and verified: > > https://issues.apache.org/jira/browse/OFBIZ-3075 > > Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, > the reason I chose 9.04 is because it is suppose to be the golden > build, patched as required, rock solid. All new users are directed to > 9.04. > > The bug actually exposes my INTERNAL paths! > > So I have to ask. What else???? smime.p7s (3K) Download Attachment |
In reply to this post by Mike Z
I appreciate you input and reminder.
remember this is not a paid organization but volunteers. and things do slip by. the PMC have instituted a few months ago the status patch ready to help inform committers so such slip ups are found Also any Branch release is for the best part bug free, but that depends on the testing done by users and submittion jiras. In all fairness there have been a lot of bug fixes on 9.04. even so the testing is not the level you have been use to in a Paid Corporation, where you have a room full of machines with different configuration and a team of paid testers to put it though it paces. Ofbiz, at best, is a semi complete application that has room for improvement and completion of features. to Start using Ofbiz as a complete application like say Word or Open office is a mistake. Mike Z sent the following on 7/14/2010 9:55 AM: > I'm testing my new store, when I decide to login as a user and cancel > an order (which is suppose to work). The user sees this: > > The Following Errors Occurred: > Error calling event: org.ofbiz.webapp.event.EventHandlerException: > Service invocation error (Could not commit transaction for service > [cancelOrderItem] call: Roll back error, could not commit transaction, > was rolled back instead because of: Error in simple-method [Auto > create OrderAdjustments > [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: > ; [Security Error To Run Auto Create Order Adjustments]) > > Odd. Looking further, I discover that a bug was submitted back in > OCT09, priority MAJOR, with a patch, and verified: > > https://issues.apache.org/jira/browse/OFBIZ-3075 > > Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, > the reason I chose 9.04 is because it is suppose to be the golden > build, patched as required, rock solid. All new users are directed to > 9.04. > > The bug actually exposes my INTERNAL paths! > > So I have to ask. What else???? > |
In reply to this post by Scott Gray-2
The community (Abdullah Shaikh) took the time, researched, identified,
coded, and submitted a patch. I don't know what more could have been asked of the community. I'm a new guy here true, but I'd like to know that if I took the time to submit a fix to ofbiz, for the benefit of the community, that it would be taken seriously, especially patches. Since the feature doesn't even work, and creates a big ugly red message to the user, I would also guess that most implementations would choose not to enable this feature. I guess I'll need to create my own local svn repository and patch it myself. On Wed, Jul 14, 2010 at 12:50 PM, Scott Gray <[hidden email]> wrote: > Each release is only as good as the community makes it. Community is the key word here, nobody gets paid to make sure Mike Z is downloading a bug free release. > > My guess is that most implementations have chosen not to allow customer's to cancel their orders and hence the bug doesn't concern them. If it concerns you then download the patch, test it, report the results and eventually a committer will find some spare time to look at it and possibly commit it. > > What else? Possibly plenty else. You can view the reported unresolved bugs by release in jira and you'll also need to be open to the possibility that there are other unreported bugs. > > It is up to users of the release like yourself to test the features that you need working and if they aren't then report them. Like I said, the release is only as good as the community makes it. > > Regards > Scott > > HotWax Media > http://www.hotwaxmedia.com > > On 15/07/2010, at 4:55 AM, Mike Z wrote: > >> I'm testing my new store, when I decide to login as a user and cancel >> an order (which is suppose to work). The user sees this: >> >> The Following Errors Occurred: >> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >> Service invocation error (Could not commit transaction for service >> [cancelOrderItem] call: Roll back error, could not commit transaction, >> was rolled back instead because of: Error in simple-method [Auto >> create OrderAdjustments >> [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: >> ; [Security Error To Run Auto Create Order Adjustments]) >> >> Odd. Looking further, I discover that a bug was submitted back in >> OCT09, priority MAJOR, with a patch, and verified: >> >> https://issues.apache.org/jira/browse/OFBIZ-3075 >> >> Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, >> the reason I chose 9.04 is because it is suppose to be the golden >> build, patched as required, rock solid. All new users are directed to >> 9.04. >> >> The bug actually exposes my INTERNAL paths! >> >> So I have to ask. What else???? > > |
In reply to this post by BJ Freeman
Thanks BJ. I hope it was just an oversight. 9.04 seems pretty rock
solid otherwise. Even so, starting a local repository is probably the way to go, because I'll surely be tweaking it as I learn more. On Wed, Jul 14, 2010 at 12:50 PM, BJ Freeman <[hidden email]> wrote: > I appreciate you input and reminder. > remember this is not a paid organization but volunteers. > and things do slip by. > the PMC have instituted a few months ago the status patch ready to help > inform committers so such slip ups are found > > Also any Branch release is for the best part bug free, but that depends on > the testing done by users and submittion jiras. In all fairness there have > been a lot of bug fixes on 9.04. even so the testing is not the level you > have been use to in a Paid Corporation, where you have a room full of > machines with different configuration and a team of paid testers to put it > though it paces. > > Ofbiz, at best, is a semi complete application that has room for improvement > and completion of features. > to Start using Ofbiz as a complete application like say Word or Open office > is a mistake. > > > > > Mike Z sent the following on 7/14/2010 9:55 AM: >> >> I'm testing my new store, when I decide to login as a user and cancel >> an order (which is suppose to work). The user sees this: >> >> The Following Errors Occurred: >> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >> Service invocation error (Could not commit transaction for service >> [cancelOrderItem] call: Roll back error, could not commit transaction, >> was rolled back instead because of: Error in simple-method [Auto >> create OrderAdjustments >> >> [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: >> ; [Security Error To Run Auto Create Order Adjustments]) >> >> Odd. Looking further, I discover that a bug was submitted back in >> OCT09, priority MAJOR, with a patch, and verified: >> >> https://issues.apache.org/jira/browse/OFBIZ-3075 >> >> Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, >> the reason I chose 9.04 is because it is suppose to be the golden >> build, patched as required, rock solid. All new users are directed to >> 9.04. >> >> The bug actually exposes my INTERNAL paths! >> >> So I have to ask. What else???? >> > |
In reply to this post by Mike Z
Please understand that when you are speaking of the OFBiz "community" (or any Apache community) there is no "us" and "them". OFBiz is a community-driven project, meaning everyone involved in the community is a volunteer contributor, even those with commits privileges. None of the committers have any responsibility to you, so you'll need to try a different approach than blame, complaints, and pushing false divisions. I don't know how you normally deal with people you want something from, but there are better approaches to get people to do things. If verbal abuse and attacks don't work, maybe you should step it up a small notch and try force, or at least threat of force? BTW, this is best done through lawyers and government as they prefer to be the only ones to do such things. If you're successful in a lawsuit perhaps you can get the police to come and arrest any community member with commit privileges who won't commit the patches you want. Oh wait, maybe that won't work either... that would just cause everyone in any jurisdiction you manage to manipulate to run away from the project and not be a committer any more, preferably before any personal legal action or arrest comes their way. Hmmmm. Maybe that won't work so well. There must be some sort of better way... -David On Jul 14, 2010, at 6:01 PM, Mike Z wrote: > The community (Abdullah Shaikh) took the time, researched, identified, > coded, and submitted a patch. I don't know what more could have been > asked of the community. I'm a new guy here true, but I'd like to know > that if I took the time to submit a fix to ofbiz, for the benefit of > the community, that it would be taken seriously, especially patches. > > Since the feature doesn't even work, and creates a big ugly red > message to the user, I would also guess that most implementations > would choose not to enable this feature. > > I guess I'll need to create my own local svn repository and patch it myself. > > On Wed, Jul 14, 2010 at 12:50 PM, Scott Gray <[hidden email]> wrote: >> Each release is only as good as the community makes it. Community is the key word here, nobody gets paid to make sure Mike Z is downloading a bug free release. >> >> My guess is that most implementations have chosen not to allow customer's to cancel their orders and hence the bug doesn't concern them. If it concerns you then download the patch, test it, report the results and eventually a committer will find some spare time to look at it and possibly commit it. >> >> What else? Possibly plenty else. You can view the reported unresolved bugs by release in jira and you'll also need to be open to the possibility that there are other unreported bugs. >> >> It is up to users of the release like yourself to test the features that you need working and if they aren't then report them. Like I said, the release is only as good as the community makes it. >> >> Regards >> Scott >> >> HotWax Media >> http://www.hotwaxmedia.com >> >> On 15/07/2010, at 4:55 AM, Mike Z wrote: >> >>> I'm testing my new store, when I decide to login as a user and cancel >>> an order (which is suppose to work). The user sees this: >>> >>> The Following Errors Occurred: >>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >>> Service invocation error (Could not commit transaction for service >>> [cancelOrderItem] call: Roll back error, could not commit transaction, >>> was rolled back instead because of: Error in simple-method [Auto >>> create OrderAdjustments >>> [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: >>> ; [Security Error To Run Auto Create Order Adjustments]) >>> >>> Odd. Looking further, I discover that a bug was submitted back in >>> OCT09, priority MAJOR, with a patch, and verified: >>> >>> https://issues.apache.org/jira/browse/OFBIZ-3075 >>> >>> Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, >>> the reason I chose 9.04 is because it is suppose to be the golden >>> build, patched as required, rock solid. All new users are directed to >>> 9.04. >>> >>> The bug actually exposes my INTERNAL paths! >>> >>> So I have to ask. What else???? >> >> |
In reply to this post by Mike Z
Actually, in spite of what BJ says there is nothing that makes the release branches more bug-free than the trunk. Well, nothing unless people work to make it so. Release branches just change less so it is easier to fix bugs without having to deal with as much of a possibility of new bugs being introduced. In other words the release branches are only as good as those who use them make them to be. Unfortunately the release branches don't tend to attract as many contributors as the trunk, so the irony is that in many cases the trunk is more bug-free than the release branches. In other words, stable in no way means the same thing as bug-free, and the irony is that in fact too much "stability" keeps bugs from being fixed. -David On Jul 14, 2010, at 6:11 PM, Mike Z wrote: > Thanks BJ. I hope it was just an oversight. 9.04 seems pretty rock > solid otherwise. Even so, starting a local repository is probably the > way to go, because I'll surely be tweaking it as I learn more. > > On Wed, Jul 14, 2010 at 12:50 PM, BJ Freeman <[hidden email]> wrote: >> I appreciate you input and reminder. >> remember this is not a paid organization but volunteers. >> and things do slip by. >> the PMC have instituted a few months ago the status patch ready to help >> inform committers so such slip ups are found >> >> Also any Branch release is for the best part bug free, but that depends on >> the testing done by users and submittion jiras. In all fairness there have >> been a lot of bug fixes on 9.04. even so the testing is not the level you >> have been use to in a Paid Corporation, where you have a room full of >> machines with different configuration and a team of paid testers to put it >> though it paces. >> >> Ofbiz, at best, is a semi complete application that has room for improvement >> and completion of features. >> to Start using Ofbiz as a complete application like say Word or Open office >> is a mistake. >> >> >> >> >> Mike Z sent the following on 7/14/2010 9:55 AM: >>> >>> I'm testing my new store, when I decide to login as a user and cancel >>> an order (which is suppose to work). The user sees this: >>> >>> The Following Errors Occurred: >>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >>> Service invocation error (Could not commit transaction for service >>> [cancelOrderItem] call: Roll back error, could not commit transaction, >>> was rolled back instead because of: Error in simple-method [Auto >>> create OrderAdjustments >>> >>> [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: >>> ; [Security Error To Run Auto Create Order Adjustments]) >>> >>> Odd. Looking further, I discover that a bug was submitted back in >>> OCT09, priority MAJOR, with a patch, and verified: >>> >>> https://issues.apache.org/jira/browse/OFBIZ-3075 >>> >>> Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, >>> the reason I chose 9.04 is because it is suppose to be the golden >>> build, patched as required, rock solid. All new users are directed to >>> 9.04. >>> >>> The bug actually exposes my INTERNAL paths! >>> >>> So I have to ask. What else???? >>> >> |
In reply to this post by David E. Jones-2
My apologies to all. I didn't mean to offend. I think ofbiz is a
fantastic project, and I'm very grateful for the community involvement, developers, and contributors. I'll try to behave better. On Wed, Jul 14, 2010 at 5:16 PM, David E Jones <[hidden email]> wrote: > > Please understand that when you are speaking of the OFBiz "community" (or any Apache community) there is no "us" and "them". OFBiz is a community-driven project, meaning everyone involved in the community is a volunteer contributor, even those with commits privileges. None of the committers have any responsibility to you, so you'll need to try a different approach than blame, complaints, and pushing false divisions. I don't know how you normally deal with people you want something from, but there are better approaches to get people to do things. > > If verbal abuse and attacks don't work, maybe you should step it up a small notch and try force, or at least threat of force? BTW, this is best done through lawyers and government as they prefer to be the only ones to do such things. If you're successful in a lawsuit perhaps you can get the police to come and arrest any community member with commit privileges who won't commit the patches you want. Oh wait, maybe that won't work either... that would just cause everyone in any jurisdiction you manage to manipulate to run away from the project and not be a committer any more, preferably before any personal legal action or arrest comes their way. Hmmmm. Maybe that won't work so well. > > There must be some sort of better way... > > -David > > > On Jul 14, 2010, at 6:01 PM, Mike Z wrote: > >> The community (Abdullah Shaikh) took the time, researched, identified, >> coded, and submitted a patch. I don't know what more could have been >> asked of the community. I'm a new guy here true, but I'd like to know >> that if I took the time to submit a fix to ofbiz, for the benefit of >> the community, that it would be taken seriously, especially patches. >> >> Since the feature doesn't even work, and creates a big ugly red >> message to the user, I would also guess that most implementations >> would choose not to enable this feature. >> >> I guess I'll need to create my own local svn repository and patch it myself. >> >> On Wed, Jul 14, 2010 at 12:50 PM, Scott Gray <[hidden email]> wrote: >>> Each release is only as good as the community makes it. Community is the key word here, nobody gets paid to make sure Mike Z is downloading a bug free release. >>> >>> My guess is that most implementations have chosen not to allow customer's to cancel their orders and hence the bug doesn't concern them. If it concerns you then download the patch, test it, report the results and eventually a committer will find some spare time to look at it and possibly commit it. >>> >>> What else? Possibly plenty else. You can view the reported unresolved bugs by release in jira and you'll also need to be open to the possibility that there are other unreported bugs. >>> >>> It is up to users of the release like yourself to test the features that you need working and if they aren't then report them. Like I said, the release is only as good as the community makes it. >>> >>> Regards >>> Scott >>> >>> HotWax Media >>> http://www.hotwaxmedia.com >>> >>> On 15/07/2010, at 4:55 AM, Mike Z wrote: >>> >>>> I'm testing my new store, when I decide to login as a user and cancel >>>> an order (which is suppose to work). The user sees this: >>>> >>>> The Following Errors Occurred: >>>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >>>> Service invocation error (Could not commit transaction for service >>>> [cancelOrderItem] call: Roll back error, could not commit transaction, >>>> was rolled back instead because of: Error in simple-method [Auto >>>> create OrderAdjustments >>>> [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: >>>> ; [Security Error To Run Auto Create Order Adjustments]) >>>> >>>> Odd. Looking further, I discover that a bug was submitted back in >>>> OCT09, priority MAJOR, with a patch, and verified: >>>> >>>> https://issues.apache.org/jira/browse/OFBIZ-3075 >>>> >>>> Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, >>>> the reason I chose 9.04 is because it is suppose to be the golden >>>> build, patched as required, rock solid. All new users are directed to >>>> 9.04. >>>> >>>> The bug actually exposes my INTERNAL paths! >>>> >>>> So I have to ask. What else???? >>> >>> > > |
Things are never as clear cut as they first appear and simple bugs are often fixed pretty quickly.
In this case however, a committer cannot just grab Abdullah's patch and dump it in without first taking time to understand the problem and the proposed fix. There are a number of issues to consider especially since we are talking about expanding the level of authorization that a customer has. The patch could indeed make this error go away but the committer has to be quite sure that the customer can't then go in and somehow make any old order adjustment that they like (100% discount anyone?). There is a risk here of actually creating a larger and less visible problem if the solution is not thoroughly verified. If a problem is time consuming to solve and doesn't receive much community attention then the committers are far less likely to jump in and deal with it unless it affects them directly. Our time is limited and we do the best we can. Regards Scott On 15/07/2010, at 12:43 PM, Mike Z wrote: > My apologies to all. I didn't mean to offend. I think ofbiz is a > fantastic project, and I'm very grateful for the community > involvement, developers, and contributors. I'll try to behave better. > > On Wed, Jul 14, 2010 at 5:16 PM, David E Jones <[hidden email]> wrote: >> >> Please understand that when you are speaking of the OFBiz "community" (or any Apache community) there is no "us" and "them". OFBiz is a community-driven project, meaning everyone involved in the community is a volunteer contributor, even those with commits privileges. None of the committers have any responsibility to you, so you'll need to try a different approach than blame, complaints, and pushing false divisions. I don't know how you normally deal with people you want something from, but there are better approaches to get people to do things. >> >> If verbal abuse and attacks don't work, maybe you should step it up a small notch and try force, or at least threat of force? BTW, this is best done through lawyers and government as they prefer to be the only ones to do such things. If you're successful in a lawsuit perhaps you can get the police to come and arrest any community member with commit privileges who won't commit the patches you want. Oh wait, maybe that won't work either... that would just cause everyone in any jurisdiction you manage to manipulate to run away from the project and not be a committer any more, preferably before any personal legal action or arrest comes their way. Hmmmm. Maybe that won't work so well. >> >> There must be some sort of better way... >> >> -David >> >> >> On Jul 14, 2010, at 6:01 PM, Mike Z wrote: >> >>> The community (Abdullah Shaikh) took the time, researched, identified, >>> coded, and submitted a patch. I don't know what more could have been >>> asked of the community. I'm a new guy here true, but I'd like to know >>> that if I took the time to submit a fix to ofbiz, for the benefit of >>> the community, that it would be taken seriously, especially patches. >>> >>> Since the feature doesn't even work, and creates a big ugly red >>> message to the user, I would also guess that most implementations >>> would choose not to enable this feature. >>> >>> I guess I'll need to create my own local svn repository and patch it myself. >>> >>> On Wed, Jul 14, 2010 at 12:50 PM, Scott Gray <[hidden email]> wrote: >>>> Each release is only as good as the community makes it. Community is the key word here, nobody gets paid to make sure Mike Z is downloading a bug free release. >>>> >>>> My guess is that most implementations have chosen not to allow customer's to cancel their orders and hence the bug doesn't concern them. If it concerns you then download the patch, test it, report the results and eventually a committer will find some spare time to look at it and possibly commit it. >>>> >>>> What else? Possibly plenty else. You can view the reported unresolved bugs by release in jira and you'll also need to be open to the possibility that there are other unreported bugs. >>>> >>>> It is up to users of the release like yourself to test the features that you need working and if they aren't then report them. Like I said, the release is only as good as the community makes it. >>>> >>>> Regards >>>> Scott >>>> >>>> HotWax Media >>>> http://www.hotwaxmedia.com >>>> >>>> On 15/07/2010, at 4:55 AM, Mike Z wrote: >>>> >>>>> I'm testing my new store, when I decide to login as a user and cancel >>>>> an order (which is suppose to work). The user sees this: >>>>> >>>>> The Following Errors Occurred: >>>>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >>>>> Service invocation error (Could not commit transaction for service >>>>> [cancelOrderItem] call: Roll back error, could not commit transaction, >>>>> was rolled back instead because of: Error in simple-method [Auto >>>>> create OrderAdjustments >>>>> [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: >>>>> ; [Security Error To Run Auto Create Order Adjustments]) >>>>> >>>>> Odd. Looking further, I discover that a bug was submitted back in >>>>> OCT09, priority MAJOR, with a patch, and verified: >>>>> >>>>> https://issues.apache.org/jira/browse/OFBIZ-3075 >>>>> >>>>> Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, >>>>> the reason I chose 9.04 is because it is suppose to be the golden >>>>> build, patched as required, rock solid. All new users are directed to >>>>> 9.04. >>>>> >>>>> The bug actually exposes my INTERNAL paths! >>>>> >>>>> So I have to ask. What else???? >>>> >>>> >> >> smime.p7s (3K) Download Attachment |
In reply to this post by David E. Jones-2
I am always amazed at how you spin things david.
David E Jones sent the following on 7/14/2010 5:22 PM: > > Actually, in spite of what BJ says there is nothing that makes the release branches more bug-free than the trunk. Well, nothing unless people work to make it so. Release branches just change less so it is easier to fix bugs without having to deal with as much of a possibility of new bugs being introduced. > > In other words the release branches are only as good as those who use them make them to be. Unfortunately the release branches don't tend to attract as many contributors as the trunk, so the irony is that in many cases the trunk is more bug-free than the release branches. > > In other words, stable in no way means the same thing as bug-free, and the irony is that in fact too much "stability" keeps bugs from being fixed. > > -David > > > On Jul 14, 2010, at 6:11 PM, Mike Z wrote: > >> Thanks BJ. I hope it was just an oversight. 9.04 seems pretty rock >> solid otherwise. Even so, starting a local repository is probably the >> way to go, because I'll surely be tweaking it as I learn more. >> >> On Wed, Jul 14, 2010 at 12:50 PM, BJ Freeman<[hidden email]> wrote: >>> I appreciate you input and reminder. >>> remember this is not a paid organization but volunteers. >>> and things do slip by. >>> the PMC have instituted a few months ago the status patch ready to help >>> inform committers so such slip ups are found >>> >>> Also any Branch release is for the best part bug free, but that depends on >>> the testing done by users and submittion jiras. In all fairness there have >>> been a lot of bug fixes on 9.04. even so the testing is not the level you >>> have been use to in a Paid Corporation, where you have a room full of >>> machines with different configuration and a team of paid testers to put it >>> though it paces. >>> >>> Ofbiz, at best, is a semi complete application that has room for improvement >>> and completion of features. >>> to Start using Ofbiz as a complete application like say Word or Open office >>> is a mistake. >>> >>> >>> >>> >>> Mike Z sent the following on 7/14/2010 9:55 AM: >>>> >>>> I'm testing my new store, when I decide to login as a user and cancel >>>> an order (which is suppose to work). The user sees this: >>>> >>>> The Following Errors Occurred: >>>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >>>> Service invocation error (Could not commit transaction for service >>>> [cancelOrderItem] call: Roll back error, could not commit transaction, >>>> was rolled back instead because of: Error in simple-method [Auto >>>> create OrderAdjustments >>>> >>>> [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: >>>> ; [Security Error To Run Auto Create Order Adjustments]) >>>> >>>> Odd. Looking further, I discover that a bug was submitted back in >>>> OCT09, priority MAJOR, with a patch, and verified: >>>> >>>> https://issues.apache.org/jira/browse/OFBIZ-3075 >>>> >>>> Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, >>>> the reason I chose 9.04 is because it is suppose to be the golden >>>> build, patched as required, rock solid. All new users are directed to >>>> 9.04. >>>> >>>> The bug actually exposes my INTERNAL paths! >>>> >>>> So I have to ask. What else???? >>>> >>> > > |
Just imagine how disappointed I have been to see this effect play out in reality! All that time invested in community building and... :) -David On Jul 14, 2010, at 7:11 PM, BJ Freeman wrote: > I am always amazed at how you spin things david. > > David E Jones sent the following on 7/14/2010 5:22 PM: >> >> Actually, in spite of what BJ says there is nothing that makes the release branches more bug-free than the trunk. Well, nothing unless people work to make it so. Release branches just change less so it is easier to fix bugs without having to deal with as much of a possibility of new bugs being introduced. >> >> In other words the release branches are only as good as those who use them make them to be. Unfortunately the release branches don't tend to attract as many contributors as the trunk, so the irony is that in many cases the trunk is more bug-free than the release branches. >> >> In other words, stable in no way means the same thing as bug-free, and the irony is that in fact too much "stability" keeps bugs from being fixed. >> >> -David >> >> >> On Jul 14, 2010, at 6:11 PM, Mike Z wrote: >> >>> Thanks BJ. I hope it was just an oversight. 9.04 seems pretty rock >>> solid otherwise. Even so, starting a local repository is probably the >>> way to go, because I'll surely be tweaking it as I learn more. >>> >>> On Wed, Jul 14, 2010 at 12:50 PM, BJ Freeman<[hidden email]> wrote: >>>> I appreciate you input and reminder. >>>> remember this is not a paid organization but volunteers. >>>> and things do slip by. >>>> the PMC have instituted a few months ago the status patch ready to help >>>> inform committers so such slip ups are found >>>> >>>> Also any Branch release is for the best part bug free, but that depends on >>>> the testing done by users and submittion jiras. In all fairness there have >>>> been a lot of bug fixes on 9.04. even so the testing is not the level you >>>> have been use to in a Paid Corporation, where you have a room full of >>>> machines with different configuration and a team of paid testers to put it >>>> though it paces. >>>> >>>> Ofbiz, at best, is a semi complete application that has room for improvement >>>> and completion of features. >>>> to Start using Ofbiz as a complete application like say Word or Open office >>>> is a mistake. >>>> >>>> >>>> >>>> >>>> Mike Z sent the following on 7/14/2010 9:55 AM: >>>>> >>>>> I'm testing my new store, when I decide to login as a user and cancel >>>>> an order (which is suppose to work). The user sees this: >>>>> >>>>> The Following Errors Occurred: >>>>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >>>>> Service invocation error (Could not commit transaction for service >>>>> [cancelOrderItem] call: Roll back error, could not commit transaction, >>>>> was rolled back instead because of: Error in simple-method [Auto >>>>> create OrderAdjustments >>>>> >>>>> [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: >>>>> ; [Security Error To Run Auto Create Order Adjustments]) >>>>> >>>>> Odd. Looking further, I discover that a bug was submitted back in >>>>> OCT09, priority MAJOR, with a patch, and verified: >>>>> >>>>> https://issues.apache.org/jira/browse/OFBIZ-3075 >>>>> >>>>> Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, >>>>> the reason I chose 9.04 is because it is suppose to be the golden >>>>> build, patched as required, rock solid. All new users are directed to >>>>> 9.04. >>>>> >>>>> The bug actually exposes my INTERNAL paths! >>>>> >>>>> So I have to ask. What else???? >>>>> >>>> >> >> |
In reply to this post by Scott Gray-2
I understand that a bug like this may have underlying security issues,
so it would need a complete code review by the experts. Hard to believe that this hasn't received more attention, so maybe it isn't important, or folks aren't testing their stores. It was important enough to Abdullah to fix, and I'm grateful he submitted a patch, but I certainly can't make the call if it's a well coded solution. For some reason, allowing a user to cancel an order was added to the default functionality of the ecommerce demo. I think this is a good feature, Amazon allows this, and I would enable it if it worked. On Wed, Jul 14, 2010 at 5:52 PM, Scott Gray <[hidden email]> wrote: > Things are never as clear cut as they first appear and simple bugs are often fixed pretty quickly. > > In this case however, a committer cannot just grab Abdullah's patch and dump it in without first taking time to understand the problem and the proposed fix. There are a number of issues to consider especially since we are talking about expanding the level of authorization that a customer has. The patch could indeed make this error go away but the committer has to be quite sure that the customer can't then go in and somehow make any old order adjustment that they like (100% discount anyone?). There is a risk here of actually creating a larger and less visible problem if the solution is not thoroughly verified. > > If a problem is time consuming to solve and doesn't receive much community attention then the committers are far less likely to jump in and deal with it unless it affects them directly. Our time is limited and we do the best we can. > > Regards > Scott > > On 15/07/2010, at 12:43 PM, Mike Z wrote: > >> My apologies to all. I didn't mean to offend. I think ofbiz is a >> fantastic project, and I'm very grateful for the community >> involvement, developers, and contributors. I'll try to behave better. >> >> On Wed, Jul 14, 2010 at 5:16 PM, David E Jones <[hidden email]> wrote: >>> >>> Please understand that when you are speaking of the OFBiz "community" (or any Apache community) there is no "us" and "them". OFBiz is a community-driven project, meaning everyone involved in the community is a volunteer contributor, even those with commits privileges. None of the committers have any responsibility to you, so you'll need to try a different approach than blame, complaints, and pushing false divisions. I don't know how you normally deal with people you want something from, but there are better approaches to get people to do things. >>> >>> If verbal abuse and attacks don't work, maybe you should step it up a small notch and try force, or at least threat of force? BTW, this is best done through lawyers and government as they prefer to be the only ones to do such things. If you're successful in a lawsuit perhaps you can get the police to come and arrest any community member with commit privileges who won't commit the patches you want. Oh wait, maybe that won't work either... that would just cause everyone in any jurisdiction you manage to manipulate to run away from the project and not be a committer any more, preferably before any personal legal action or arrest comes their way. Hmmmm. Maybe that won't work so well. >>> >>> There must be some sort of better way... >>> >>> -David >>> >>> >>> On Jul 14, 2010, at 6:01 PM, Mike Z wrote: >>> >>>> The community (Abdullah Shaikh) took the time, researched, identified, >>>> coded, and submitted a patch. I don't know what more could have been >>>> asked of the community. I'm a new guy here true, but I'd like to know >>>> that if I took the time to submit a fix to ofbiz, for the benefit of >>>> the community, that it would be taken seriously, especially patches. >>>> >>>> Since the feature doesn't even work, and creates a big ugly red >>>> message to the user, I would also guess that most implementations >>>> would choose not to enable this feature. >>>> >>>> I guess I'll need to create my own local svn repository and patch it myself. >>>> >>>> On Wed, Jul 14, 2010 at 12:50 PM, Scott Gray <[hidden email]> wrote: >>>>> Each release is only as good as the community makes it. Community is the key word here, nobody gets paid to make sure Mike Z is downloading a bug free release. >>>>> >>>>> My guess is that most implementations have chosen not to allow customer's to cancel their orders and hence the bug doesn't concern them. If it concerns you then download the patch, test it, report the results and eventually a committer will find some spare time to look at it and possibly commit it. >>>>> >>>>> What else? Possibly plenty else. You can view the reported unresolved bugs by release in jira and you'll also need to be open to the possibility that there are other unreported bugs. >>>>> >>>>> It is up to users of the release like yourself to test the features that you need working and if they aren't then report them. Like I said, the release is only as good as the community makes it. >>>>> >>>>> Regards >>>>> Scott >>>>> >>>>> HotWax Media >>>>> http://www.hotwaxmedia.com >>>>> >>>>> On 15/07/2010, at 4:55 AM, Mike Z wrote: >>>>> >>>>>> I'm testing my new store, when I decide to login as a user and cancel >>>>>> an order (which is suppose to work). The user sees this: >>>>>> >>>>>> The Following Errors Occurred: >>>>>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >>>>>> Service invocation error (Could not commit transaction for service >>>>>> [cancelOrderItem] call: Roll back error, could not commit transaction, >>>>>> was rolled back instead because of: Error in simple-method [Auto >>>>>> create OrderAdjustments >>>>>> [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: >>>>>> ; [Security Error To Run Auto Create Order Adjustments]) >>>>>> >>>>>> Odd. Looking further, I discover that a bug was submitted back in >>>>>> OCT09, priority MAJOR, with a patch, and verified: >>>>>> >>>>>> https://issues.apache.org/jira/browse/OFBIZ-3075 >>>>>> >>>>>> Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, >>>>>> the reason I chose 9.04 is because it is suppose to be the golden >>>>>> build, patched as required, rock solid. All new users are directed to >>>>>> 9.04. >>>>>> >>>>>> The bug actually exposes my INTERNAL paths! >>>>>> >>>>>> So I have to ask. What else???? >>>>> >>>>> >>> >>> > > |
In reply to this post by Mike Z
This response is a big step in the right direction. There is an old
French proverb that "you catch more flies with honey than with vinegar". As David said (his own highly ascerbic wit aside) there is a better way. I think that everyone on this list needs to remember: 1) that learning OFBiz is painful and frustrating, which can come out (even without intending it) in new-user posts, and 2) that responding to perceived offenses with more flames serves no useful purpose. Postel's law applies to mailing lists, as well as programming: Be liberal in what input you accept, and conservative in your output. Just my thoughts. -- Matt Warnock <[hidden email]> RidgeCrest Herbals, Inc. On Wed, 2010-07-14 at 17:43 -0700, Mike Z wrote: > My apologies to all. I didn't mean to offend. I think ofbiz is a > fantastic project, and I'm very grateful for the community > involvement, developers, and contributors. I'll try to behave better. > > On Wed, Jul 14, 2010 at 5:16 PM, David E Jones <[hidden email]> wrote: > > > > Please understand that when you are speaking of the OFBiz "community" (or any Apache community) there is no "us" and "them". OFBiz is a community-driven project, meaning everyone involved in the community is a volunteer contributor, even those with commits privileges. None of the committers have any responsibility to you, so you'll need to try a different approach than blame, complaints, and pushing false divisions. I don't know how you normally deal with people you want something from, but there are better approaches to get people to do things. > > > > If verbal abuse and attacks don't work, maybe you should step it up a small notch and try force, or at least threat of force? BTW, this is best done through lawyers and government as they prefer to be the only ones to do such things. If you're successful in a lawsuit perhaps you can get the police to come and arrest any community member with commit privileges who won't commit the patches you want. Oh wait, maybe that won't work either... that would just cause everyone in any jurisdiction you manage to manipulate to run away from the project and not be a committer any more, preferably before any personal legal action or arrest comes their way. Hmmmm. Maybe that won't work so well. > > > > There must be some sort of better way... > > > > -David > > > > > > On Jul 14, 2010, at 6:01 PM, Mike Z wrote: > > > >> The community (Abdullah Shaikh) took the time, researched, identified, > >> coded, and submitted a patch. I don't know what more could have been > >> asked of the community. I'm a new guy here true, but I'd like to know > >> that if I took the time to submit a fix to ofbiz, for the benefit of > >> the community, that it would be taken seriously, especially patches. > >> > >> Since the feature doesn't even work, and creates a big ugly red > >> message to the user, I would also guess that most implementations > >> would choose not to enable this feature. > >> > >> I guess I'll need to create my own local svn repository and patch it myself. > >> > >> On Wed, Jul 14, 2010 at 12:50 PM, Scott Gray <[hidden email]> wrote: > >>> Each release is only as good as the community makes it. Community is the key word here, nobody gets paid to make sure Mike Z is downloading a bug free release. > >>> > >>> My guess is that most implementations have chosen not to allow customer's to cancel their orders and hence the bug doesn't concern them. If it concerns you then download the patch, test it, report the results and eventually a committer will find some spare time to look at it and possibly commit it. > >>> > >>> What else? Possibly plenty else. You can view the reported unresolved bugs by release in jira and you'll also need to be open to the possibility that there are other unreported bugs. > >>> > >>> It is up to users of the release like yourself to test the features that you need working and if they aren't then report them. Like I said, the release is only as good as the community makes it. > >>> > >>> Regards > >>> Scott > >>> > >>> HotWax Media > >>> http://www.hotwaxmedia.com > >>> > >>> On 15/07/2010, at 4:55 AM, Mike Z wrote: > >>> > >>>> I'm testing my new store, when I decide to login as a user and cancel > >>>> an order (which is suppose to work). The user sees this: > >>>> > >>>> The Following Errors Occurred: > >>>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: > >>>> Service invocation error (Could not commit transaction for service > >>>> [cancelOrderItem] call: Roll back error, could not commit transaction, > >>>> was rolled back instead because of: Error in simple-method [Auto > >>>> create OrderAdjustments > >>>> [file:/opt/ofbiz-9.04/applications/order/script/org/ofbiz/order/order/OrderServices.xml#recreateOrderAdjustments]]: > >>>> ; [Security Error To Run Auto Create Order Adjustments]) > >>>> > >>>> Odd. Looking further, I discover that a bug was submitted back in > >>>> OCT09, priority MAJOR, with a patch, and verified: > >>>> > >>>> https://issues.apache.org/jira/browse/OFBIZ-3075 > >>>> > >>>> Why wasn't it fixed in 9.04 SVN? I'm sorry, but as a brand new user, > >>>> the reason I chose 9.04 is because it is suppose to be the golden > >>>> build, patched as required, rock solid. All new users are directed to > >>>> 9.04. > >>>> > >>>> The bug actually exposes my INTERNAL paths! > >>>> > >>>> So I have to ask. What else???? > >>> > >>> > > > > |
Free forum by Nabble | Edit this page |