Should be fixed at revision 760363.
Thanks for report
Jacques
From: "aswath narayana" <
[hidden email]>
> Hello,
> I was working on ProjectMgr module on my localcopy r759268
> * Opened the DemoProj1 -cust1 project
> * I added a task - b1
> * I clicked on the TimeSheet.
> * I Clicked on the New timesheet
> * PartyID = The Administrator. and then click on Add
> * I selected the b1 task, I just added
> * Entered 10 hrs for Monday
> * Selected the checkbox complete
> * Then, clicked on the update button.
>
> Everything is fine. Now, I click on 'Status to Complete'.
>
> The Following Errors Occurred:
>
> Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL
> parameter [timesheetId] passed to secure (https) request-map with uri
> [TimeSheetStatusToComplete] with an event that calls service
> [updateTimesheet]; this is not allowed for security reasons! The data should
> be encrypted by making it part of the request body (a form field) instead of
> the request URL.
>
> -Aswath
>
Locked
