Error on pagination at some screens when we do any operation (like update, delete) from list

[Amardeep Singh Jhajj-2]

Hi Everyone,

I found issue in pagination on some screens when we do any operation (like
update, delete) on list item.

For example: I have updated the content type from list in Content Setup
Menu in Content application and then clicked on next link of pagination, I
got the following error:

The Following Errors Occurred:

Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
parameter [contentTypeId] passed to secure (https) request-map with uri
[updateContentType] with an event that calls service [updateContentType];
this is not allowed for security reasons!

The above error is unexpected as I just tried to see next list records of
ContentType. The reason of error is pagination URL which is same as URL of
page i.e. updateContentType. This URL is the update operation URL and it is
not redirected to appropriate page after operation.

IMO, pagination target URL should be independent of page URL and it should
be added on form using paginate-target attribute of form widget.

This issue can be possible in all components. I am planning to create one
parent ticket and will add their child tickets wherever needed for each
component for adding "paginate-target" to the forms.

Please let us know your thoughts.

Thanks and Regards
--
Amardeep Singh Jhajj
http://www.hotwaxsystems.com/

[Divesh Dutta-2]

That makes sense to me Amardeep i.e pagination target URL should be
independent of page URL and it should be added on form using
paginate-target attribute of form widget.

Thanks
--
Divesh Dutta.

On Tue, Jun 14, 2016 at 9:43 PM, Amardeep Singh Jhajj <
[hidden email]> wrote:

> Hi Everyone,
>
> I found issue in pagination on some screens when we do any operation (like
> update, delete) on list item.
>
> For example: I have updated the content type from list in Content Setup
> Menu in Content application and then clicked on next link of pagination, I
> got the following error:
>
> The Following Errors Occurred:
>
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found
> URL
> parameter [contentTypeId] passed to secure (https) request-map with uri
> [updateContentType] with an event that calls service [updateContentType];
> this is not allowed for security reasons!
>
> The above error is unexpected as I just tried to see next list records of
> ContentType. The reason of error is pagination URL which is same as URL of
> page i.e. updateContentType. This URL is the update operation URL and it is
> not redirected to appropriate page after operation.
>
> IMO, pagination target URL should be independent of page URL and it should
> be added on form using paginate-target attribute of form widget.
>
> This issue can be possible in all components. I am planning to create one
> parent ticket and will add their child tickets wherever needed for each
> component for adding "paginate-target" to the forms.
>
> Please let us know your thoughts.
>
> Thanks and Regards
> --
> Amardeep Singh Jhajj
> http://www.hotwaxsystems.com/
>

[Jacques Le Roux]

I can confirm that I saw this error in other places and IIRW fixed few using the paginate-target form attribute.

Last one was http://svn.apache.org/viewvc?view=revision&revision=1743937

Jacques


Le 15/06/2016 à 08:06, Divesh Dutta a écrit :

> That makes sense to me Amardeep i.e pagination target URL should be
> independent of page URL and it should be added on form using
> paginate-target attribute of form widget.
>
> Thanks
> --
> Divesh Dutta.
>
> On Tue, Jun 14, 2016 at 9:43 PM, Amardeep Singh Jhajj <
> [hidden email]> wrote:
>
>> Hi Everyone,
>>
>> I found issue in pagination on some screens when we do any operation (like
>> update, delete) on list item.
>>
>> For example: I have updated the content type from list in Content Setup
>> Menu in Content application and then clicked on next link of pagination, I
>> got the following error:
>>
>> The Following Errors Occurred:
>>
>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found
>> URL
>> parameter [contentTypeId] passed to secure (https) request-map with uri
>> [updateContentType] with an event that calls service [updateContentType];
>> this is not allowed for security reasons!
>>
>> The above error is unexpected as I just tried to see next list records of
>> ContentType. The reason of error is pagination URL which is same as URL of
>> page i.e. updateContentType. This URL is the update operation URL and it is
>> not redirected to appropriate page after operation.
>>
>> IMO, pagination target URL should be independent of page URL and it should
>> be added on form using paginate-target attribute of form widget.
>>
>> This issue can be possible in all components. I am planning to create one
>> parent ticket and will add their child tickets wherever needed for each
>> component for adding "paginate-target" to the forms.
>>
>> Please let us know your thoughts.
>>
>> Thanks and Regards
>> --
>> Amardeep Singh Jhajj
>> http://www.hotwaxsystems.com/
>>

[Pranay Pandey-3]

Hi Amardeep,

What you have recommended is looking good to me i.e. pagination target URL
should be independent of page URL and it should be added on form using
paginate-target attribute of form widget.

The approach you are planning to take is also looking good to me i.e. to
create on parent ticket and add a child ticket for each of component to
check and fix.

Best regards,

Pranay Pandey
HotWax Systems
http://www.hotwaxsystems.com/

On Tue, Jun 14, 2016 at 9:43 PM, Amardeep Singh Jhajj <
[hidden email]> wrote:

> Hi Everyone,
>
> I found issue in pagination on some screens when we do any operation (like
> update, delete) on list item.
>
> For example: I have updated the content type from list in Content Setup
> Menu in Content application and then clicked on next link of pagination, I
> got the following error:
>
> The Following Errors Occurred:
>
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found
> URL
> parameter [contentTypeId] passed to secure (https) request-map with uri
> [updateContentType] with an event that calls service [updateContentType];
> this is not allowed for security reasons!
>
> The above error is unexpected as I just tried to see next list records of
> ContentType. The reason of error is pagination URL which is same as URL of
> page i.e. updateContentType. This URL is the update operation URL and it is
> not redirected to appropriate page after operation.
>
> IMO, pagination target URL should be independent of page URL and it should
> be added on form using paginate-target attribute of form widget.
>
> This issue can be possible in all components. I am planning to create one
> parent ticket and will add their child tickets wherever needed for each
> component for adding "paginate-target" to the forms.
>
> Please let us know your thoughts.
>
> Thanks and Regards
> --
> Amardeep Singh Jhajj
> http://www.hotwaxsystems.com/
>

[Amardeep Singh Jhajj-2]

Thanks everyone for your thoughts.

I have created ticket for this issue -
https://issues.apache.org/jira/browse/OFBIZ-7362

Regards,
--
Amardeep Singh Jhajj
http://www.hotwaxsystems.com/

On Wed, Jun 15, 2016 at 12:28 PM, Pranay Pandey <
[hidden email]> wrote:

> Hi Amardeep,
>
> What you have recommended is looking good to me i.e. pagination target URL
> should be independent of page URL and it should be added on form using
> paginate-target attribute of form widget.
>
> The approach you are planning to take is also looking good to me i.e. to
> create on parent ticket and add a child ticket for each of component to
> check and fix.
>
> Best regards,
>
> Pranay Pandey
> HotWax Systems
> http://www.hotwaxsystems.com/
>
> On Tue, Jun 14, 2016 at 9:43 PM, Amardeep Singh Jhajj <
> [hidden email]> wrote:
>
> > Hi Everyone,
> >
> > I found issue in pagination on some screens when we do any operation
> (like
> > update, delete) on list item.
> >
> > For example: I have updated the content type from list in Content Setup
> > Menu in Content application and then clicked on next link of pagination,
> I
> > got the following error:
> >
> > The Following Errors Occurred:
> >
> > Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found
> > URL
> > parameter [contentTypeId] passed to secure (https) request-map with uri
> > [updateContentType] with an event that calls service [updateContentType];
> > this is not allowed for security reasons!
> >
> > The above error is unexpected as I just tried to see next list records of
> > ContentType. The reason of error is pagination URL which is same as URL
> of
> > page i.e. updateContentType. This URL is the update operation URL and it
> is
> > not redirected to appropriate page after operation.
> >
> > IMO, pagination target URL should be independent of page URL and it
> should
> > be added on form using paginate-target attribute of form widget.
> >
> > This issue can be possible in all components. I am planning to create one
> > parent ticket and will add their child tickets wherever needed for each
> > component for adding "paginate-target" to the forms.
> >
> > Please let us know your thoughts.
> >
> > Thanks and Regards
> > --
> > Amardeep Singh Jhajj
> > http://www.hotwaxsystems.com/
> >
>