[
https://issues.apache.org/jira/browse/OFBIZ-7556?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ashish Vijaywargiya closed OFBIZ-7556.
--------------------------------------
Resolution: Fixed
Fix Version/s: 15.12.01
14.12.01
Thanks Deepak Baghel for the contribution. Your changes are committed at following revisions.
trunk - r1750097
R15.12 - r1750098
R14.12 - r1750099
> Error occurred when making notes private/public from project screen
> -------------------------------------------------------------------
>
> Key: OFBIZ-7556
> URL:
https://issues.apache.org/jira/browse/OFBIZ-7556> Project: OFBiz
> Issue Type: Bug
> Components: specialpurpose/projectmgr
> Affects Versions: Trunk
> Reporter: Deepak Baghel
> Assignee: Ashish Vijaywargiya
> Fix For: 14.12.01, 15.12.01
>
> Attachments: OFBIZ-7556-Trunk.patch
>
>
> Steps to regenerate :-
> 1. Login into project component and select any created project from the projects list.
> 2. Add note from note section and make it public/private.
> 3. See the notes in the project summary.
> 4. Try to make it public/private then error comes with below message
> {code}
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [workEffortId] passed to secure (https) request-map with uri [updateProjectNote] with an event that calls service [updateWorkEffortNote]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. Moreover it would be kind if you could create a Jira sub-task of
https://issues.apache.org/jira/browse/OFBIZ-2330 (check before if a sub-task for this error does not exist). If you are not sure how to create a Jira issue please have a look before at
http://cwiki.apache.org/confluence/x/JIB2 Thank you in advance for your help.
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
Locked
