Error Message trying to Close an unused Time Period

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Error Message trying to Close an unused Time Period

Sharan-F
Hi

I've been doing some testing on the latest Hotwax Demo in Accounting and have just come across this error message:

The Following Errors Occurred:
Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [customTimePeriodId] passed to secure (https) request-map with uri [closeFinancialTimePeriod] with an event that calls service [closeFinancialTimePeriod]; this is not allowed for security reasons!

Steps to re-create the message is as follows:
1. Login as admin
2.  Go to Accounting / General Ledger
3. Then select 'Setup 'for Company
4. Then Select Time Period
5. I then pressed the 'Close' button for time period 6001 (which is demo data and relates to 2007) and this error message appears.

I did check to see and there were no existing accounting transactions at all that were related to any of the time periods. Does anyone know if something has changed in the security setup that now disallows this type of process?

Thanks
Sharan
Reply | Threaded
Open this post in threaded view
|

Re: Error Message trying to Close an unused Time Period

Jacques Le Roux
Administrator
Hi Sharan,

Could you retry with an updated version please. This should have been fixed since r752399

Thanks

Jacques

From: "Sharan-F" <[hidden email]>

>
> Hi
>
> I've been doing some testing on the latest Hotwax Demo in Accounting and
> have just come across this error message:
>
> The Following Errors Occurred:
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
> parameter [customTimePeriodId] passed to secure (https) request-map with uri
> [closeFinancialTimePeriod] with an event that calls service
> [closeFinancialTimePeriod]; this is not allowed for security reasons!
>
> Steps to re-create the message is as follows:
> 1. Login as admin
> 2.  Go to Accounting / General Ledger
> 3. Then select 'Setup 'for Company
> 4. Then Select Time Period
> 5. I then pressed the 'Close' button for time period 6001 (which is demo
> data and relates to 2007) and this error message appears.
>
> I did check to see and there were no existing accounting transactions at all
> that were related to any of the time periods. Does anyone know if something
> has changed in the security setup that now disallows this type of process?
>
> Thanks
> Sharan
> --
> View this message in context: http://www.nabble.com/Error-Message-trying-to-Close-an-unused-Time-Period-tp22448514p22448514.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>

Reply | Threaded
Open this post in threaded view
|

Re: Error Message trying to Close an unused Time Period

David E Jones-3

Technically it's not "fixed", but the framework now only logs a  
warning instead of completely disallowing it.

Once we have more time to correct a bunch of these issues this  
constraint will be going back in, and this link (along with many  
others) will need to be changed to a form so the parameters are  
protected.

-David


On Mar 11, 2009, at 3:30 AM, Jacques Le Roux wrote:

> Hi Sharan,
>
> Could you retry with an updated version please. This should have  
> been fixed since r752399
>
> Thanks
>
> Jacques
>
> From: "Sharan-F" <[hidden email]>
>> Hi
>> I've been doing some testing on the latest Hotwax Demo in  
>> Accounting and
>> have just come across this error message:
>> The Following Errors Occurred:
>> Error calling event: org.ofbiz.webapp.event.EventHandlerException:  
>> Found URL
>> parameter [customTimePeriodId] passed to secure (https) request-map  
>> with uri
>> [closeFinancialTimePeriod] with an event that calls service
>> [closeFinancialTimePeriod]; this is not allowed for security reasons!
>> Steps to re-create the message is as follows:
>> 1. Login as admin
>> 2.  Go to Accounting / General Ledger
>> 3. Then select 'Setup 'for Company
>> 4. Then Select Time Period
>> 5. I then pressed the 'Close' button for time period 6001 (which is  
>> demo
>> data and relates to 2007) and this error message appears.
>> I did check to see and there were no existing accounting  
>> transactions at all
>> that were related to any of the time periods. Does anyone know if  
>> something
>> has changed in the security setup that now disallows this type of  
>> process?
>> Thanks
>> Sharan
>> --
>> View this message in context: http://www.nabble.com/Error-Message-trying-to-Close-an-unused-Time-Period-tp22448514p22448514.html
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>

Reply | Threaded
Open this post in threaded view
|

Re: Error Message trying to Close an unused Time Period

David E Jones-3

Okay, in rev 755032 it is technically "fixed".

The error is still not turned on, but this will avoid the log warning  
message, and handle it in the future when the strict error is turned  
back on.

-David


On Mar 11, 2009, at 11:14 AM, David E Jones wrote:

>
> Technically it's not "fixed", but the framework now only logs a  
> warning instead of completely disallowing it.
>
> Once we have more time to correct a bunch of these issues this  
> constraint will be going back in, and this link (along with many  
> others) will need to be changed to a form so the parameters are  
> protected.
>
> -David
>
>
> On Mar 11, 2009, at 3:30 AM, Jacques Le Roux wrote:
>
>> Hi Sharan,
>>
>> Could you retry with an updated version please. This should have  
>> been fixed since r752399
>>
>> Thanks
>>
>> Jacques
>>
>> From: "Sharan-F" <[hidden email]>
>>> Hi
>>> I've been doing some testing on the latest Hotwax Demo in  
>>> Accounting and
>>> have just come across this error message:
>>> The Following Errors Occurred:
>>> Error calling event: org.ofbiz.webapp.event.EventHandlerException:  
>>> Found URL
>>> parameter [customTimePeriodId] passed to secure (https) request-
>>> map with uri
>>> [closeFinancialTimePeriod] with an event that calls service
>>> [closeFinancialTimePeriod]; this is not allowed for security  
>>> reasons!
>>> Steps to re-create the message is as follows:
>>> 1. Login as admin
>>> 2.  Go to Accounting / General Ledger
>>> 3. Then select 'Setup 'for Company
>>> 4. Then Select Time Period
>>> 5. I then pressed the 'Close' button for time period 6001 (which  
>>> is demo
>>> data and relates to 2007) and this error message appears.
>>> I did check to see and there were no existing accounting  
>>> transactions at all
>>> that were related to any of the time periods. Does anyone know if  
>>> something
>>> has changed in the security setup that now disallows this type of  
>>> process?
>>> Thanks
>>> Sharan
>>> --
>>> View this message in context: http://www.nabble.com/Error-Message-trying-to-Close-an-unused-Time-Period-tp22448514p22448514.html
>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>
>>
>