Error while deleting a Promo

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

Error while deleting a Promo

MarioF
Hi all,

I receive an error when I try to delete some promos. I made the following:

Catalog Manager Appl. -> Stores -> My Store -> Promos -> Select some Promo (for example 9020) -> Stores -> Delete

When I press the delete button, I receive the following error:

Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [productStoreId] passed to secure (https) request-map with uri [promo_deleteProductStorePromoAppl] with an event that calls service [deleteProductStorePromoAppl]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. Moreover it would be kind if you could create a Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check before if a sub-task for this error does not exist). If you are not sure how to create a Jira issue please have a look before at http://docs.ofbiz.org/x/r. Thank you in advance for your help.

I don't know where this error can come from. Any idea?

Thnaks in advance,
Mario.
Reply | Threaded
Open this post in threaded view
|

Re: Error while deleting a Promo

MarioF
Hi all,

I can delete this promos making the following:

In the url.properties file, change the service.http.parameters.require.encrypted=Y to service.http.parameters.require.encrypted=N. Then you can delete all the promos. When you delete all the promos I change again this propertie to Y.

Thanks all,
Mario.


MarioF wrote
Hi all,

I receive an error when I try to delete some promos. I made the following:

Catalog Manager Appl. -> Stores -> My Store -> Promos -> Select some Promo (for example 9020) -> Stores -> Delete

When I press the delete button, I receive the following error:

Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [productStoreId] passed to secure (https) request-map with uri [promo_deleteProductStorePromoAppl] with an event that calls service [deleteProductStorePromoAppl]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. Moreover it would be kind if you could create a Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check before if a sub-task for this error does not exist). If you are not sure how to create a Jira issue please have a look before at http://docs.ofbiz.org/x/r. Thank you in advance for your help.

I don't know where this error can come from. Any idea?

Thnaks in advance,
Mario.
Reply | Threaded
Open this post in threaded view
|

Re: Error while deleting a Promo

Arun Patidar
Hello Mario,

    This is a secure url issue and it will be easy to fix. You can see  
https://issues.apache.org/jira/browse/OFBIZ-2468  for more detail and
also see commits no. 790512, 790516, 774999.


Thanks & Regards
---
Arun Patidar

 




MarioF wrote:

> Hi all,
>
> I can delete this promos making the following:
>
> In the url.properties file, change the
> service.http.parameters.require.encrypted=Y to
> service.http.parameters.require.encrypted=N. Then you can delete all the
> promos. When you delete all the promos I change again this propertie to Y.
>
> Thanks all,
> Mario.
>
>
>
> MarioF wrote:
>  
>> Hi all,
>>
>> I receive an error when I try to delete some promos. I made the following:
>>
>> Catalog Manager Appl. -> Stores -> My Store -> Promos -> Select some Promo
>> (for example 9020) -> Stores -> Delete
>>
>> When I press the delete button, I receive the following error:
>>
>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found
>> URL parameter [productStoreId] passed to secure (https) request-map with
>> uri [promo_deleteProductStorePromoAppl] with an event that calls service
>> [deleteProductStorePromoAppl]; this is not allowed for security reasons!
>> The data should be encrypted by making it part of the request body (a form
>> field) instead of the request URL. Moreover it would be kind if you could
>> create a Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330
>> (check before if a sub-task for this error does not exist). If you are not
>> sure how to create a Jira issue please have a look before at
>> http://docs.ofbiz.org/x/r. Thank you in advance for your help.
>>
>> I don't know where this error can come from. Any idea?
>>
>> Thnaks in advance,
>> Mario.
>>
>>    
>
>  

Reply | Threaded
Open this post in threaded view
|

Some rough enquiries about OFBiz, seeking rough answers

malleblas
In reply to this post by MarioF
Hey folks,
New to OFBiz, just have some quick questions which only require really
rough answers, just to gauge if I am going to be in over my head.
Basically, at my workplace, we require a tracking mechanism for every
single length of steel we receive and must be able to track that through
to every individual part that is made from that piece. After it is made
into a part, it also must be traceable to the original raw material but
also be
traceable as a part in it's own right as it will have attached
measurement data and what not. I noticed there is serialised inventory
however it
seems it requires manual entry. I was wondering if the framework as it
stands is capable of introducing a new entity Serial with customised names
(so for us it would be IND [0-9]+) and a generation strategy (sequence,
hi-lo, or any other custom style of generation) which could be attached
to any product.
This is basically the main feature which will define whether we can
utilise OFBiz and in fact we have faced this problem continuously while
evaluating
numerous commercial packages.

If this is still a possibility but not yet possible with the current
system then I would be more than happy to devote my time and company's
resources
to implementing these features as I believe it would be very important
for critical manufacturing industries.
Related to this would be a data capture module which would associate
manufacturing data to items... I noticed that OFBiz is geared towards very
standard product/store kinda services as opposed to job-shop like
environments. Any comments regarding this?

Nice to meet you all, and I am sure I will be seeing (chatting,
mailing?) you all in the near future.

Michael
Reply | Threaded
Open this post in threaded view
|

Re: Some rough enquiries about OFBiz, seeking rough answers

James McGill-5
For real "Lot traceability" in a manufacturing supply chain situation, you
will probably need to extend the OFBiz inventory/product/order functionality
a bit.
What OFBiz calls a "Lot" isn't exactly what we call a "Lot" in a similar
supply chain context.   If you go in this direction, I would be very
interested.

--
James McGill
Able Engineering
Phoenix AZ
Reply | Threaded
Open this post in threaded view
|

Re: Some rough enquiries about OFBiz, seeking rough answers

David E. Jones-2
In reply to this post by malleblas

On Sep 1, 2009, at 6:59 AM, Michael Alleblas wrote:

> Hey folks,
> New to OFBiz, just have some quick questions which only require  
> really rough answers, just to gauge if I am going to be in over my  
> head.
> Basically, at my workplace, we require a tracking mechanism for  
> every single length of steel we receive and must be able to track  
> that through
> to every individual part that is made from that piece. After it is  
> made into a part, it also must be traceable to the original raw  
> material but also be
> traceable as a part in it's own right as it will have attached  
> measurement data and what not. I noticed there is serialised  
> inventory however it
> seems it requires manual entry. I was wondering if the framework as  
> it stands is capable of introducing a new entity Serial with  
> customised names
> (so for us it would be IND [0-9]+) and a generation strategy  
> (sequence, hi-lo, or any other custom style of generation) which  
> could be attached
> to any product.

If you mean automatically generating/sequencing serial numbers that  
would be pretty easy to do. You could simply change the behavior of  
the code that processes the input for whatever forms are involved by  
adding what is called an SECA rule to intercept the main service  
before it runs with another service that will generate the serial  
number no number is specified.

It's true that "the devil is in the details", but typically not in any  
one detail, it's the large number of details and dependencies between  
them are the cumulative big trick. To do a sufficient review you  
really need to list the business activities you want to support (I  
prefer a process oriented story form) and then see how each one would  
be (or would not be) supported in the system.

-David


> This is basically the main feature which will define whether we can  
> utilise OFBiz and in fact we have faced this problem continuously  
> while evaluating
> numerous commercial packages.
>
> If this is still a possibility but not yet possible with the current  
> system then I would be more than happy to devote my time and  
> company's resources
> to implementing these features as I believe it would be very  
> important for critical manufacturing industries.
> Related to this would be a data capture module which would associate  
> manufacturing data to items... I noticed that OFBiz is geared  
> towards very
> standard product/store kinda services as opposed to job-shop like  
> environments. Any comments regarding this?
>
> Nice to meet you all, and I am sure I will be seeing (chatting,  
> mailing?) you all in the near future.
>
> Michael