
|
If you were logged in you would be able to see more operations.
|
|
|
AppFuse
Created: 26/May/08 05:42 AM
Updated: 26/May/08 07:37 PM
|
|
| Component/s: |
Web - JSF
|
| Affects Version/s: |
2.0.1,
2.0.2
|
| Fix Version/s: |
2.1
|
|
|
# Create an Appfuse2 project of ArchType 'JSF Basic' using command "mvn archetype:create....."
# Run the application using the command "mvn jetty:run-war"
# Login as admin
# Go to Edit Profile
# Put an invalid phone number or invalid zip code and press Save button. (just to activate the validation after form submit)
# After seeing some error message put valid entry on the corresponding field showing validation error message.
# Now press Save button. bingo...Access Denied!
# Now u can never login as admin! bcz the Admin_Role of user 'admin' get lost (role returing null) due to the previous Save action. (the entry related to user 'admin' in table 'user_role' got deleted somehow for that save operation)
|
|
Description
|
# Create an Appfuse2 project of ArchType 'JSF Basic' using command "mvn archetype:create....."
# Run the application using the command "mvn jetty:run-war"
# Login as admin
# Go to Edit Profile
# Put an invalid phone number or invalid zip code and press Save button. (just to activate the validation after form submit)
# After seeing some error message put valid entry on the corresponding field showing validation error message.
# Now press Save button. bingo...Access Denied!
# Now u can never login as admin! bcz the Admin_Role of user 'admin' get lost (role returing null) due to the previous Save action. (the entry related to user 'admin' in table 'user_role' got deleted somehow for that save operation) |
Show » |
|
hardware: Intel based 32bit pc
jre: 1.6.0
maven: 2.0.8