Hi
I've been doing some testing on the latest Hotwax Demo in Accounting and have just come across this error message: The Following Errors Occurred: Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [customTimePeriodId] passed to secure (https) request-map with uri [closeFinancialTimePeriod] with an event that calls service [closeFinancialTimePeriod]; this is not allowed for security reasons! Steps to re-create the message is as follows: 1. Login as admin 2. Go to Accounting / General Ledger 3. Then select 'Setup 'for Company 4. Then Select Time Period 5. I then pressed the 'Close' button for time period 6001 (which is demo data and relates to 2007) and this error message appears. I did check to see and there were no existing accounting transactions at all that were related to any of the time periods. Does anyone know if something has changed in the security setup that now disallows this type of process? Thanks Sharan |
Administrator
|
Hi Sharan,
Could you retry with an updated version please. This should have been fixed since r752399 Thanks Jacques From: "Sharan-F" <[hidden email]> > > Hi > > I've been doing some testing on the latest Hotwax Demo in Accounting and > have just come across this error message: > > The Following Errors Occurred: > Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL > parameter [customTimePeriodId] passed to secure (https) request-map with uri > [closeFinancialTimePeriod] with an event that calls service > [closeFinancialTimePeriod]; this is not allowed for security reasons! > > Steps to re-create the message is as follows: > 1. Login as admin > 2. Go to Accounting / General Ledger > 3. Then select 'Setup 'for Company > 4. Then Select Time Period > 5. I then pressed the 'Close' button for time period 6001 (which is demo > data and relates to 2007) and this error message appears. > > I did check to see and there were no existing accounting transactions at all > that were related to any of the time periods. Does anyone know if something > has changed in the security setup that now disallows this type of process? > > Thanks > Sharan > -- > View this message in context: http://www.nabble.com/Error-Message-trying-to-Close-an-unused-Time-Period-tp22448514p22448514.html > Sent from the OFBiz - User mailing list archive at Nabble.com. > |
Technically it's not "fixed", but the framework now only logs a warning instead of completely disallowing it. Once we have more time to correct a bunch of these issues this constraint will be going back in, and this link (along with many others) will need to be changed to a form so the parameters are protected. -David On Mar 11, 2009, at 3:30 AM, Jacques Le Roux wrote: > Hi Sharan, > > Could you retry with an updated version please. This should have > been fixed since r752399 > > Thanks > > Jacques > > From: "Sharan-F" <[hidden email]> >> Hi >> I've been doing some testing on the latest Hotwax Demo in >> Accounting and >> have just come across this error message: >> The Following Errors Occurred: >> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >> Found URL >> parameter [customTimePeriodId] passed to secure (https) request-map >> with uri >> [closeFinancialTimePeriod] with an event that calls service >> [closeFinancialTimePeriod]; this is not allowed for security reasons! >> Steps to re-create the message is as follows: >> 1. Login as admin >> 2. Go to Accounting / General Ledger >> 3. Then select 'Setup 'for Company >> 4. Then Select Time Period >> 5. I then pressed the 'Close' button for time period 6001 (which is >> demo >> data and relates to 2007) and this error message appears. >> I did check to see and there were no existing accounting >> transactions at all >> that were related to any of the time periods. Does anyone know if >> something >> has changed in the security setup that now disallows this type of >> process? >> Thanks >> Sharan >> -- >> View this message in context: http://www.nabble.com/Error-Message-trying-to-Close-an-unused-Time-Period-tp22448514p22448514.html >> Sent from the OFBiz - User mailing list archive at Nabble.com. >> > |
Okay, in rev 755032 it is technically "fixed". The error is still not turned on, but this will avoid the log warning message, and handle it in the future when the strict error is turned back on. -David On Mar 11, 2009, at 11:14 AM, David E Jones wrote: > > Technically it's not "fixed", but the framework now only logs a > warning instead of completely disallowing it. > > Once we have more time to correct a bunch of these issues this > constraint will be going back in, and this link (along with many > others) will need to be changed to a form so the parameters are > protected. > > -David > > > On Mar 11, 2009, at 3:30 AM, Jacques Le Roux wrote: > >> Hi Sharan, >> >> Could you retry with an updated version please. This should have >> been fixed since r752399 >> >> Thanks >> >> Jacques >> >> From: "Sharan-F" <[hidden email]> >>> Hi >>> I've been doing some testing on the latest Hotwax Demo in >>> Accounting and >>> have just come across this error message: >>> The Following Errors Occurred: >>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >>> Found URL >>> parameter [customTimePeriodId] passed to secure (https) request- >>> map with uri >>> [closeFinancialTimePeriod] with an event that calls service >>> [closeFinancialTimePeriod]; this is not allowed for security >>> reasons! >>> Steps to re-create the message is as follows: >>> 1. Login as admin >>> 2. Go to Accounting / General Ledger >>> 3. Then select 'Setup 'for Company >>> 4. Then Select Time Period >>> 5. I then pressed the 'Close' button for time period 6001 (which >>> is demo >>> data and relates to 2007) and this error message appears. >>> I did check to see and there were no existing accounting >>> transactions at all >>> that were related to any of the time periods. Does anyone know if >>> something >>> has changed in the security setup that now disallows this type of >>> process? >>> Thanks >>> Sharan >>> -- >>> View this message in context: http://www.nabble.com/Error-Message-trying-to-Close-an-unused-Time-Period-tp22448514p22448514.html >>> Sent from the OFBiz - User mailing list archive at Nabble.com. >>> >> > |
Free forum by Nabble | Edit this page |